RE: Limiting Host Access

[Dan Parker <drpLO@helios.hampshire.edu>]

On Fri, 12 Apr 2002, Michael Cunningham wrote:

> If your running a unix shop, then you need to check out pam_ldap 
> avaliable from www.padl.com It has the capablity of restricting logins
> based on two main methods, a list of hosts in a "hosts" attribute,
> or the user being a member of a specific group in ldap.
> 
> IMHO hosts style works well for small networks but groups are 
> essential for large 100+ machine networks. 

That sounds perfect!  I have pam_ldap installed but I haven't seen anything
about this feature.  Do you know where I might find documentation about it?

Thanks,

Dan