Christopher Huhn

LDAP groupfilter don't work as expected

2

In our setup we use LDAP authentication with `grouptree` and `groupfilter`, eg. ``` $conf['auth']['ldap']['grouptree'] = 'cn=groups,dc=example,dc=com'; $conf['auth']['ldap']['groupfilter'] = '(&(cn=onagroup)(uniqueMember=%{dn})(objectClass=GroupOfUniqueNames))'; ``` The expected behavior would be that only members of `ONAGROUP`...

This fixes the #137 for our setup. Maybe it should be restricted to `!empty($conf['auth']['ldap']['groupfilter'])` or depend on a config setting like `disable_guest`.

Apply group mappings to groupOfUniqueNames LDAP groups too

2

This patch adds mapping support for groupOfUniqueNames groups in LDAP authentication. Example: 1) The authenticated user is a member of the group `cn=PREFIX_ADMIN,cn=Groups,dc=example,dc=com`. 1) The following mapping is defined: `$conf['auth']['ldap']['mapping']['grps']...

Restrict DHCP pools to subclasses

1

Hi, we'd like to configure multiple DHCP pools per subnet and assign these pools to different types of nodes as described in section subclasses in the dhcpd.conf manpage. The class...

When `chef-client.timer` has been configured and then is deactivated again (`node['chef_client']['systemd']['timer'] = false`), a restart notification is sent to the deleted unit: https://github.com/chef-cookbooks/chef-client/blob/14435f7a42af11aaf8d0a06ace4221ecefa3e752/recipes/systemd_service.rb#L90 The logic has to be the other...

Hi y'all Loading of the subversion Apache modules requires a strict load order: 1. `mod_dav` 2. `mod_dav_svn` 3. `mod_authz_svn` At least on Debian Buster `apache2_module 'authz_svn'` breaks this load order...

## Description When a custom resource has a `property` that is flagged as `sensitive` **and** guarded by a `regex` its content will be printed to STDOUT if it does not...

Remove duplicate

4

billing_admins section existed twice, first was incomplete ### Description Small documentation fix ### Issues Resolved None ### Check List Does not apply

Hi, We try to use kitchen-verifier-serverspec as a drop-in replacement for busser-serverspec. In my .kitchen.yml I have: ``` verifier: name: serverspec default_pattern: true ``` Our test patterns are at `test/integration/_suite_/serverspec/localhost/*_spec.rb`...

This seem to have happened somewhere around version 5.7.3. The command line option still wants tcp and dismisses tcp4 though. A more sophisticated solution would look at the snmpnetstat version...