pam/templates/ldap.conf

rootbinddn cn=<%= fqdn %>,ou=Hosts,<%= dc_suffix %>

uri ldaps://ldap.<%= domain %>
base <%= dc_suffix %>
pam_lookup_policy no
pam_password exop
nss_base_passwd ou=People,<%= dc_suffix %>?one
nss_base_shadow ou=People,<%= dc_suffix %>?one
nss_base_group  ou=Group,<%= dc_suffix %>?one

nss_schema rfc2307bis
nss_map_attribute uniqueMember member
sudoers_base ou=sudoers,<%= dc_suffix %>
#sudoers_debug 2

<% if access_class = 'commiters' %>
# for restricted access
nss_override_attribute_value loginShell /usr/local/bin/sv_membersh.pl
<% end %>

1	rootbinddn cn=<%= fqdn %>,ou=Hosts,<%= dc_suffix %>
2
3	uri ldaps://ldap.<%= domain %>
4	base <%= dc_suffix %>
5	pam_lookup_policy no
6	pam_password exop
7	nss_base_passwd ou=People,<%= dc_suffix %>?one
8	nss_base_shadow ou=People,<%= dc_suffix %>?one
9	nss_base_group ou=Group,<%= dc_suffix %>?one
10
11	nss_schema rfc2307bis
12	nss_map_attribute uniqueMember member
13	sudoers_base ou=sudoers,<%= dc_suffix %>
14	#sudoers_debug 2
15
16	<% if access_class = 'commiters' %>
17	# for restricted access
18	nss_override_attribute_value loginShell /usr/local/bin/sv_membersh.pl
19	<% end %>
20