From owner-freebsd-stable@FreeBSD.ORG Wed Feb 24 10:58:14 2010 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3A2831065675 for ; Wed, 24 Feb 2010 10:58:14 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (gate6.infracaninophile.co.uk [IPv6:2001:8b0:151:1::1]) by mx1.freebsd.org (Postfix) with ESMTP id A1C1C8FC0C for ; Wed, 24 Feb 2010 10:58:13 +0000 (UTC) Received: from seedling.black-earth.co.uk (seedling.black-earth.co.uk [81.187.76.163]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.4/8.14.4) with ESMTP id o1OAw89X048857 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO) for ; Wed, 24 Feb 2010 10:58:08 GMT (envelope-from m.seaman@infracaninophile.co.uk) Message-ID: <4B850640.80103@infracaninophile.co.uk> Date: Wed, 24 Feb 2010 10:58:08 +0000 From: Matthew Seaman Organization: Infracaninophile User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.1.7) Gecko/20100111 Thunderbird/3.0.1 MIME-Version: 1.0 To: freebsd-stable@freebsd.org References: <20100224112311.73ac53f6.gerrit@pmp.uni-hannover.de> <20100224103947.GA75442@hugo10.ka.punkt.de> In-Reply-To: <20100224103947.GA75442@hugo10.ka.punkt.de> X-Enigmail-Version: 1.0.1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Virus-Scanned: clamav-milter 0.95.3 at happy-idiot-talk.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-1.1 required=5.0 tests=BAYES_00,DKIM_ADSP_ALL, SPF_FAIL,T_KHOP_PGP_INLINE autolearn=no version=3.3.0 X-Spam-Checker-Version: SpamAssassin 3.3.0 (2010-01-18) on happy-idiot-talk.infracaninophile.co.uk Subject: Re: nss_ldap and multiple group memberships X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Feb 2010 10:58:14 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 24/02/2010 10:39, Patrick M. Hausen wrote: > I do not remember where that '?one' came from and what precisely > it does. Voodoo I copied from some obscure "Howto", I figure. > I'd appreciate some feedback on that part ;-) It sets the scope of the LDAP search to the direct children of the search base: ie it only goes one layer into the hierarchy. Alternatives are ?base -- just search the base object or ?sub -- (the default) search the entire hierarchy rooted from the search base. Cheers, Matthew - -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkuFBkAACgkQ8Mjk52CukIwq9ACfa5AZ/9dorJ55/p4NEPvvhcGJ XdUAn01BiQ0eYKKAFM3PBnj2ovwMRuLP =J1Jt -----END PGP SIGNATURE-----