Merge commit 'origin/template' into ldap

[matthijs/servers/drsnuggles.git] / etc / libnss-ldap.conf

diff --git a/etc/libnss-ldap.conf b/etc/libnss-ldap.conf
index d4991e1d4a19d5a52d12fad5df0518a232eb3316..32b8645997edd7c3170292ec6cb6398614ae1278 100644 (file)
--- a/etc/libnss-ldap.conf
+++ b/etc/libnss-ldap.conf
@@ -11,3 +11,12 @@ uri ldap://ldap.drsnuggles.stderr.nl
 
 # The LDAP version to use
 ldap_version 3
+
+# Use the uniqueMember property, referring to dn's instead of the memberUid
+# property referring to usernames. This allows us to have group members with or
+# without an account, and give a group member an account without having to
+# change all his memberships.
+nss_schema rfc2307bis
+
+# Use our custom posixGroup replacement
+nss_map_objectclass posixGroup simplePosixGroup