Red Hat Bugzilla – Bug 860667
[man sssd-ldap] 'ldap_access_filter' description needs to be updated
Last modified: 2014-06-18 03:08:54 EDT
Description of problem: As per man sssd-ldap : ldap_access_filter (string) If using access_provider = ldap, this option is mandatory. It specifies an LDAP search filter criteria that must be met for the user to be granted access on this host. If access_provider = ldap and this option is not set, it will result in all users being denied access. Use access_provider = allow to change this default behavior. The option 'ldap_access_filter' is not mandatory if we use ldap_access_order = <something other than filter>
Upstream ticket: https://fedorahosted.org/sssd/ticket/1540
Verified in version 1.9.2-74 in man sssd-ldap Updated text: If using access_provider = ldap and ldap_access_order = filter (default), this option is mandatory.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2013-0508.html