Re: Want interesting restrictions to ldap auth on different servers to different users

2010-12-06 Thread c0re
2010/12/6 Dan White dwh...@olp.net: On 06/12/10 15:34 +0300, c0re wrote: 2010/12/1 Dan White dwh...@olp.net: Thanks for example! But it still requires to edit clients.conf when adding device. And not restricts by groups. That's true, unless you have some of your clients coming from behind

Re: Want interesting restrictions to ldap auth on different servers to different users

2010-12-01 Thread c0re
2010/11/29 Howard Chu h...@symas.com: c0re wrote: 2010/11/19 Phuong Marie VUONGmangocph...@gmail.com: Hello, First, im sorry about my English. I share here my experience which worked for limit acces host/group of host for user... In the configuration of ldap client /etc/ldap.conf , i

Re: Want interesting restrictions to ldap auth on different servers to different users

2010-11-29 Thread c0re
2010/11/19 Phuong Marie VUONG mangocph...@gmail.com: Hello, First, im sorry about my English. I share here my experience which worked for limit acces host/group of host for user... In the configuration of ldap client /etc/ldap.conf , i have activate the host attribute and a filter in

Re: Want interesting restrictions to ldap auth on different servers to different users

2010-11-29 Thread Howard Chu
c0re wrote: 2010/11/19 Phuong Marie VUONGmangocph...@gmail.com: Hello, First, im sorry about my English. I share here my experience which worked for limit acces host/group of host for user... In the configuration of ldap client /etc/ldap.conf , i have activate the host attribute and a filter

Re: Want interesting restrictions to ldap auth on different servers to different users

2010-11-19 Thread c0re
can you give an example of usage pam_check_host_attr? And how can I use group of hosts and assign user to this group to permit access user to this group avoiding enumerating hosts in users dn each time I add new user? What should I set in host:? Hostname of server? How host attr are sent to