nss: Update to use our custom LDAP schema.

This uses the uniqueMember attribute containing dns instead of the
memberUid attribute containing usernames for forming groups.
Additionally, it tells nss-ldap about our replacement for the posixGroup
objectClass.

diff --git a/etc/libnss-ldap.conf b/etc/libnss-ldap.conf
index d4991e1d4a19d5a52d12fad5df0518a232eb3316..7154a4d28da9648c6db8b6be24ac9e849615d8c0 100644 (file)
--- a/etc/libnss-ldap.conf
+++ b/etc/libnss-ldap.conf
@@ -11,3 +11,9 @@ uri ldap://ldap.drsnuggles.stderr.nl
 
 # The LDAP version to use
 ldap_version 3
+
+# Use uniqueMember
+nss_schema rfc2307bis
+
+# Use our custom posixGroup replacement
+nss_map_objectclass posixGroup simplePosixGroup