diff options
Diffstat (limited to 'modules/restrictshell/templates')
| -rwxr-xr-x | modules/restrictshell/templates/ldap-sshkey2file.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/modules/restrictshell/templates/ldap-sshkey2file.py b/modules/restrictshell/templates/ldap-sshkey2file.py index 4384b35b..9668973d 100755 --- a/modules/restrictshell/templates/ldap-sshkey2file.py +++ b/modules/restrictshell/templates/ldap-sshkey2file.py @@ -18,8 +18,8 @@ uris=['ldap://ldap.<%= domain %>'] random.shuffle(uris) uri = " ".join(uris) timeout=5 -binddn="uid=sshkeyreader,ou=System Accounts,%s" % basedn -pwfile="/etc/sshkeyreader.pw" +binddn="cn=<%= fqdn %>,ou=Hosts," % basedn +pwfile="<%= ldap_pwfile %>" # filter out disabled accounts also # too bad uidNumber doesn't support >= filters filter="(&(objectClass=inetOrgPerson)(objectClass=ldapPublicKey)(objectClass=posixAccount)(sshPublicKey=*)(!(shadowExpire=*)))" |