samba - Aug 2005 - ldap filter removed?

In the release notes for 3.0.20rc1, I noticed the following:

Changes since 3.0.15pre2
------------------------

    Parameter Name                      Action
    --------------                      ------
    ldap filter                         Removed

I'm curious as to why this was removed and if there's another 
alternative.  Our samba setup makes use of the ldap filter to restrict 
who can login to our labs.

-- 
Marlys A. Nelson                      Sr. Network Specialist
Information Technology Services       Network Services
University of Wisconsin - River Falls 715/425-4357
410 South Third Street                Email: Marlys.A.Nelson@uwrf.edu
River Falls  WI  54022                http://www.uwrf.edu/

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Marlys Nelson wrote:
> In the release notes for 3.0.20rc1, I noticed the following:
> 
> Changes since 3.0.15pre2
> ------------------------
> 
>    Parameter Name                      Action
>    --------------                      ------
>    ldap filter                         Removed
> 
> I'm curious as to why this was removed and if there's another
> alternative.  Our samba setup makes use of the ldap filter to 
> restrict who can login to our labs.
Better to simply update the nss_ldap filter on your Samba box.
The 'ldap filter' parameter in smb.conf was pretty badly broken.
Due to the wide variery of ldap searches smbd must perform, it is
prety impossible to allow an admin to define a single search filter
that could be universally applied.  And quite often, a misconfigured
filter generated a lot of support email on the mailing lists.





cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC7obZIR7qMdg1EfYRAgxwAJ4lDXJXX+DelST1gzmU/1RjRgdy9ACfZoYA
W3wge1VazF1L+VLV/Lsz2PQ=865h
-----END PGP SIGNATURE-----