Re: [Freeipa-users] nsAccountLock attribute

2015-04-01 Thread Petr Spacek
On 1.4.2015 11:43, Prashant Bapat wrote: > Hi Jan, > > Thanks for your response. But my problem is AmazonLinux does not support > ipa-client or sssd. No binaries available, lots of dependency issues > compiling from source. > > So the route I have taken is to use FreeIPA on Fedora21. And use auth

Re: [Freeipa-users] nsAccountLock attribute

2015-04-01 Thread Martin Kosek
On 04/01/2015 07:09 AM, Prashant Bapat wrote: > Hi , > > Is there a way of making the nsAccountLock attribute (User enable/disable) > to be anonymously readable ? > > I'm trying to implement a SSH key lookup sshd authorized key command > script. Based on this attribute the user will be allowed to

Re: [Freeipa-users] nsAccountLock attribute

2015-04-01 Thread Prashant Bapat
Hi Jan, Thanks for your response. But my problem is AmazonLinux does not support ipa-client or sssd. No binaries available, lots of dependency issues compiling from source. So the route I have taken is to use FreeIPA on Fedora21. And use authconfig to enumerate users/groups. And have a SSH comman

Re: [Freeipa-users] nsAccountLock attribute

2015-03-31 Thread Jan Cholasta
Hi, Dne 1.4.2015 v 07:09 Prashant Bapat napsal(a): Hi , Is there a way of making the nsAccountLock attribute (User enable/disable) to be anonymously readable ? I'm trying to implement a SSH key lookup sshd authorized key command script. Based on this attribute the user will be allowed to login

[Freeipa-users] nsAccountLock attribute

2015-03-31 Thread Prashant Bapat
Hi , Is there a way of making the nsAccountLock attribute (User enable/disable) to be anonymously readable ? I'm trying to implement a SSH key lookup sshd authorized key command script. Based on this attribute the user will be allowed to login. I need this to be anonymously readable. Tried setti