[Samba] ldap filter removed?

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Marlys Nelson wrote:
> In the release notes for 3.0.20rc1, I noticed the following:
> 
> Changes since 3.0.15pre2
> ------------------------
> 
>    Parameter Name                      Action
>    --------------                      ------
>    ldap filter                         Removed
> 
> I'm curious as to why this was removed and if there's another
> alternative.  Our samba setup makes use of the ldap filter to 
> restrict who can login to our labs.

Better to simply update the nss_ldap filter on your Samba box.
The 'ldap filter' parameter in smb.conf was pretty badly broken.
Due to the wide variery of ldap searches smbd must perform, it is
prety impossible to allow an admin to define a single search filter
that could be universally applied.  And quite often, a misconfigured
filter generated a lot of support email on the mailing lists.





cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC7obZIR7qMdg1EfYRAgxwAJ4lDXJXX+DelST1gzmU/1RjRgdy9ACfZoYA
W3wge1VazF1L+VLV/Lsz2PQ=
=865h
-----END PGP SIGNATURE-----