diff options
Diffstat (limited to 'modules/openldap')
| -rw-r--r-- | modules/openldap/templates/slapd.conf | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/modules/openldap/templates/slapd.conf b/modules/openldap/templates/slapd.conf index ac67b714..6ae637c2 100644 --- a/modules/openldap/templates/slapd.conf +++ b/modules/openldap/templates/slapd.conf @@ -37,6 +37,7 @@ moduleload ppolicy.la moduleload memberof.la moduleload unique.la moduleload dynlist.la +moduleload constraint.la TLSCertificateFile /etc/ssl/openldap/ldap.<%= domain %>.pem TLSCertificateKeyFile /etc/ssl/openldap/ldap.<%= domain %>.pem @@ -101,6 +102,9 @@ unique_uri ldap:///?mail?sub? overlay dynlist dynlist-attrset groupOfURLs memberURL member +overlay constraint +constraint_attribute sshPublicKey regex ^ssh-[rd]sa [[:graph:]]+ [[:graph:]]+$ + # uncomment if you want to automatically update group # memberships when an user is removed from the tree # Also uncomment the refint.la moduleload above |