[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Disable Linux commands for LDAP users

To: Bernard Fay <bernard.fay@gmail.com>
Subject: Re: Disable Linux commands for LDAP users
From: Mauricio Tavares <raubvogel@gmail.com>
Date: Fri, 21 Oct 2016 17:42:14 -0400
Cc: openldap-technical <openldap-technical@openldap.org>
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=6dwMJegp3kOKBWqngYOPHhbFfseN1w+xIIy4FzZHXRQ=; b=csLf4e7Hlcs+EeLcCnoBBnE/NQ8Ki70ajCCUAre8vngtxxxF9R4PP1wMy+0Y5L72UD fqFXj4mPOnUvsedWgjR+yeqjT8h5n8l7zUAHa0wVN4sNZJORqWg6FXh58OX4HmF0AiQM +i9ln9fCCBiPtuud7xk8wn2lEGCt9BdtuQ5+rsl1akOxSvbqPxsEgknMNXWBF0Yextdr K6ZJ7pjdeSV8ZzGaZjZc1vkU5p1hoJ9sKpX6a2EoILd098J4unLsS05gNgLjwlRomvTk NVk27q64z64iT4U+EjyCPbUPvyt7m3X3LWpE4Zlufb24ha0qbrpOiftCd2MWCpXUHVUz KpMQ==
In-reply-to: <CAHEKYV4-3fZGfbRC_a97hwhfzQpaQVCyDACp2X1zrm+guGzZ=g@mail.gmail.com>
References: <CAH3AE4Ybx7jGgE-DmzBK1B7fU_L4GYfpXB8JvWVfObon3gpUNg@mail.gmail.com> <CAHEKYV7y3sTxeThJ=mAsnQC6pP4nvSO0tjCpnrUD9nYKY+K4=A@mail.gmail.com> <CAHEKYV4-3fZGfbRC_a97hwhfzQpaQVCyDACp2X1zrm+guGzZ=g@mail.gmail.com>

I think there was something called ldap-sudo, but there might be other ways to do it.

On Oct 21, 2016 4:39 PM, "Bernard Fay" <bernard.fay@gmail.com> wrote:

Hi,

I would like to able to disable some Linux commands for LDAP users. One of those commands is passwd. Because of some specific needs, when the LDAP users have to change their password a special script has been created for this purpose. They MUST not use passwd but this command is still required by local users.

Does one of you might have an idea to disable Linux commands for LDAP users only?

Thanks,
Bernard

References:
- Disable Linux commands for LDAP users
  - From: Bernard Fay <bernard.fay@gmail.com>

Prev by Date: Re: Disable Linux commands for LDAP users
Next by Date: openldap access control order behavior
Index(es):
- Chronological
- Thread