From 8ff986b1bcbd46509a351e224518c4871b931088 Mon Sep 17 00:00:00 2001 From: Howard Chu Date: Wed, 29 Apr 2009 02:41:26 +0000 Subject: [PATCH] Note that host SSD must be configured for hostservice option --- contrib/slapd-modules/nssov/slapo-nssov.5 | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/contrib/slapd-modules/nssov/slapo-nssov.5 b/contrib/slapd-modules/nssov/slapo-nssov.5 index 416320d138..4b55db9d7b 100644 --- a/contrib/slapd-modules/nssov/slapo-nssov.5 +++ b/contrib/slapd-modules/nssov/slapo-nssov.5 @@ -155,7 +155,8 @@ The recommended approach is to use .B hostservice instead. In this case, ipHost entries must be created for all hosts being managed, and they must also have the authorizedServiceObject -class to allow authorizedService attributes to be used. +class to allow authorizedService attributes to be used. Also the +NSS host SSD must be configured so that ipHost entries can be found. Authorization is checked by performing an LDAP Compare operation looking for the PAM service name in the authorizedService attribute. .B slapd -- 2.39.5