Skip to content

Commit

Permalink
Fix attribute name
Browse files Browse the repository at this point in the history
  • Loading branch information
Rui Miguel Silva Seabra committed Nov 2, 2024
1 parent 0f86b0b commit 3706cf7
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions src/page/ConfiguringAixClients.rst
Original file line number Diff line number Diff line change
Expand Up @@ -228,7 +228,7 @@ Create :file:`/etc/security/ldap/ldap.cfg`, **note that you don't want to allow
krbkeypath:/etc/krb5/krb5.keytab
krbprincipal:host/[email protected]
defaultentrylocation:local
userbasedn:cn=users,cn=accounts,dc=example,dc=com??(!(nsaccountlocked=TRUE))
userbasedn:cn=users,cn=accounts,dc=example,dc=com??(!(nsaccountlock=TRUE))
groupbasedn:cn=groups,cn=accounts,dc=example,dc=com
netgroupbasedn:cn=ng,cn=compat,dc=example,dc=com
userclasses:posixaccount
Expand Down Expand Up @@ -276,7 +276,7 @@ And add the following to :file:`/etc/pam.cfg`:
::

(...)
userbasedn:cn=users,cn=accounts,dc=example,dc=com??(&(!(nsaccountlocked=TRUE))(memberOf=ipaUniqeID=12345678-1234-1234-1234567890ab,cn=hbac,dc=example,dc=com))
userbasedn:cn=users,cn=accounts,dc=example,dc=com??(&(!(nsaccountlock=TRUE))(memberOf=ipaUniqeID=12345678-1234-1234-1234567890ab,cn=hbac,dc=example,dc=com))
(...)

Or... **if you don't want to use HBAC, or prevent locked users from logging in**, your `userbasedn` parameter may be specified without any additional filters, like:
Expand Down

0 comments on commit 3706cf7

Please sign in to comment.