[Date Prev][Date Next]
Re: Restricting Logon permission
Среда 05 Март 2003 22:26, Wade Winright написал:
> Can you utilize pam? If you are using Linux or Solaris, I believe this
> would be the best way to implement this...
> -----Original Message-----
> From: Daniel Davidson [mailto:firstname.lastname@example.org]
> Sent: Wed 3/5/2003 1:04 PM
> To: OpenLDAP-Software@OpenLDAP.org
> Subject: Restricting Logon permission
> We are working on trying unifying our password database via openldap, and I
> am looking for a way to restrict logon rights, so only certain people can
> log onto some servers. For example I do not want everyone to be able to
> log onto a machine we use for testing applications before we make them
> public, but it would be nice if we could use ldap for authentication.
> thanks for any help,
If You use PAM-LDAP & NSS-LDAP there is attribute "host" in pam-ldap schema,
where You can list all hosts the User can log in.