[SSSD-users] Re: ad_access_filter question

2017-11-24 Thread Jakub Hrozek
On Fri, Nov 24, 2017 at 10:02:15AM +, Conwell, Nik wrote: > Interesting, thanks. I had tried the simple provider but this didn't > restrict access. Did you look into the logs why it didn't? Did you use a group that showed up in the group list of the "id" command? > Since the docs noted

[SSSD-users] Re: ad_access_filter question

2017-11-24 Thread Conwell, Nik
Interesting, thanks. I had tried the simple provider but this didn't restrict access. Since the docs noted that it didn't honor the "expired" expired attribute I didn't look into it any closer. I'll try this again and look through debug logs to see where it broke down; potentially my groups