Newbie question - How to do server based access control ?

["InfoNavigator - Ldap" <ldap@infonavigator.be>]

High,

we are looking into openldap as a way to provide single sign-on to our unix
network

I searched through the entire documentation, but there is one tricky
question remaining

Suppose I have several machines which all authenticate against the ldap
server, how can I make sure that a user can login to server1, but not to
server2

	example	userid	stefan
			pwd		password

	the user stefan needs access to server1, but not to server2

	is this possible ?

thx in advance

Stefan