Note that host SSD must be configured for hostservice option

This commit is contained in:
Howard Chu 2009-04-29 02:41:26 +00:00
parent 94ec116fca
commit 8ff986b1bc

View File

@ -155,7 +155,8 @@ The recommended approach is to use
.B hostservice
instead. In this case, ipHost entries must be created for all hosts
being managed, and they must also have the authorizedServiceObject
class to allow authorizedService attributes to be used.
class to allow authorizedService attributes to be used. Also the
NSS host SSD must be configured so that ipHost entries can be found.
Authorization is checked by performing an LDAP Compare operation
looking for the PAM service name in the authorizedService attribute.
.B slapd