From owner-freebsd-stable@FreeBSD.ORG Thu Feb 25 08:35:39 2010 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 111EA106566C for ; Thu, 25 Feb 2010 08:35:39 +0000 (UTC) (envelope-from gerrit@pmp.uni-hannover.de) Received: from mrelay1.uni-hannover.de (mrelay1.uni-hannover.de [130.75.2.106]) by mx1.freebsd.org (Postfix) with ESMTP id 77F0C8FC0C for ; Thu, 25 Feb 2010 08:35:38 +0000 (UTC) Received: from www.pmp.uni-hannover.de (www.pmp.uni-hannover.de [130.75.117.2]) by mrelay1.uni-hannover.de (8.14.2/8.14.2) with ESMTP id o1P8ZXlr010954; Thu, 25 Feb 2010 09:35:34 +0100 Received: from pmp.uni-hannover.de (arc.pmp.uni-hannover.de [130.75.117.1]) by www.pmp.uni-hannover.de (Postfix) with SMTP id 298E624; Thu, 25 Feb 2010 09:35:33 +0100 (CET) Date: Thu, 25 Feb 2010 09:35:33 +0100 From: Gerrit =?ISO-8859-1?Q?K=FChn?= To: "Scott, Brian" Message-Id: <20100225093533.13f0e393.gerrit@pmp.uni-hannover.de> In-Reply-To: References: <20100224112311.73ac53f6.gerrit@pmp.uni-hannover.de> Organization: Albert-Einstein-Institut (MPI =?ISO-8859-1?Q?f=FCr?= Gravitationsphysik & IGP =?ISO-8859-1?Q?Universit=E4t?= Hannover) X-Mailer: Sylpheed 2.7.1 (GTK+ 2.18.4; i386-portbld-freebsd7.0) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-PMX-Version: 5.5.9.388399, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2010.2.25.82125 Cc: freebsd-stable@freebsd.org Subject: Re: nss_ldap and multiple group memberships X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Feb 2010 08:35:39 -0000 On Thu, 25 Feb 2010 15:10:03 +1100 "Scott, Brian" wrote about RE: nss_ldap and multiple group memberships: SB> It looks like you may need to uncomment the line '#nss_map_attribute SB> uniqueMember member' in your ldap.conf to then use the correct SB> attribute name. Yes, that's exactly the solution here. I got this from reading the config files of a working Linux client that uses the same nss libraries. Thank you for your support! cu Gerrit