Add LDAP user_filter and group_filter config settings about ssh-key-authority HOT 12 CLOSED

Ok with user_filter = "(objectClass=user)" it is working.

from ssh-key-authority.

Perhaps user_filter and group_filter would be better names.

from ssh-key-authority.

group_filter isn't actually needed, since we never directly fetch groups (instead fetching them from the user's group_member attribute).

from ssh-key-authority.

group_filter isn't actually needed, since we never directly fetch groups (instead fetching them from the user's group_member attribute).

This is not entirely true. Although we do fetch based on the member attribute, we do still fetch from groups. While it shouldn't be necessary, it would be good to add it for safety anyway.

from ssh-key-authority.

Now i get everywhere access denied.

from ssh-key-authority.

Forget it. Sorry.

from ssh-key-authority.

Ok, i get everywhere access denied right now if a user filter is set.

from ssh-key-authority.

Is your user filter correct? If it doesn't match any users that would be likely to cause all users to be deactivated.

from ssh-key-authority.

Thank you very much ;)

from ssh-key-authority.

And the other problem at first login?

from ssh-key-authority.

Ok, glad we finally got that sorted :) Now just to fix that last bug...

from ssh-key-authority.

Really great, thanks for spending your time.

from ssh-key-authority.