20 Jun
2016
20 Jun
'16
6:24 a.m.
On Sat, Jun 18, 2016 at 01:27:59PM -0400, Arran Cudbard-Bell wrote:
On 17 Jun 2016, at 18:38, Matthew Newton <mcn4@leicester.ac.uk> wrote:
There is now code in the rlm_winbind module in v3.1.x that permits checking AD group membership in a similar way that you can currently do with LDAP. So if you don't want to configure LDAP, but do have a need to check AD groups, this might be useful.
Looks good! IIRC this allows checks against nested groups too, right?
I just checked - yes it does. Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>