Étienne BERSAC
Étienne BERSAC
Ok. This looks like a bug^Wfeature in ldap2pg 5 that v6 fixed. Let's add an explicit error handling there.
> Just to confirm, commenting the WhoAmI check like > > ```diff > diff --git a/internal/ldap/client.go b/internal/ldap/client.go > index db572e2..9ede7f9 100644 > --- a/internal/ldap/client.go > +++ b/internal/ldap/client.go > @@ -78,12...
Hi @jschmidwgit thanks for reaching. Did you read master [ldap2pg.yml](https://github.com/dalibo/ldap2pg/blob/master/ldap2pg.yml) ?
Set `parent: dba` to the role rule creating your DBA. This will make them member of `dba` role.
> Hello, ok now i am beginning to understand. I did not understand that the value parent represents the role. Would `memberof` be more explicit/evident than `parent` ?
I'm thinking of a client side `if`. But I'm not sure about the design. The best solution is to simply use an attribute with the right value: ``` yaml -...
> > > Hello, ok now i am beginning to understand. I did not understand that the value parent represents the role. > > > > > > Would `memberof`...
Closing stale issue.
Hi, Thanks for the feedback. `on` is not an SQL statement. `on` references a builtin ACL as documented at https://ldap2pg.readthedocs.io/en/latest/builtins/#acl-reference . ``` yaml privileges: rewinder: - type: EXECUTE on: ALL...
Hi @HermanPool . This is a regression of ldap2pg 6.0. Can you share your custom privilege to see how you could implement this in 6.0 ? In 6.0, privileges are...