From 208309ae35c69cf7a83d1f2f67c5fe288c03657a Mon Sep 17 00:00:00 2001 From: Michael Scherer Date: Thu, 13 Jan 2011 19:41:24 +0000 Subject: - allow to set access without forcing the restricted shell ( should be done by openssh in fact, but that's easier to do like this for now ) --- modules/pam/templates/ldap.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'modules/pam/templates') diff --git a/modules/pam/templates/ldap.conf b/modules/pam/templates/ldap.conf index f346873a..a1d751cf 100644 --- a/modules/pam/templates/ldap.conf +++ b/modules/pam/templates/ldap.conf @@ -15,7 +15,7 @@ nss_map_attribute uniqueMember member sudoers_base ou=sudoers,<%= dc_suffix %> #sudoers_debug 2 -<% if access_class = 'commiters' %> +<% if restricted_shell %> # for restricted access nss_override_attribute_value loginShell /usr/local/bin/sv_membersh.pl <% end %> -- cgit v1.2.1