check-Item checked by ldap

[Alan DeKok]

Florian Prester <Florian.Prester at rrze.uni-erlangen.de> wrote:
>  I want to grant access, if a user fullfills a LDAP-attribute, for example:
> 
> users-file:
> ...
> test  LDAP-Group == "test"
...

> ldap.attrmap:
> ...
> checkItem       LDAP-Group                      Userid

  No.  Do NOT add that entry to ldap.attrmap.  It's wrong.

  Please read the documentation to see what LDAP-Group does.

  As a result of that entry, everything else in your post is not doing
what you expect.

  Alan DeKok.