I tried the OpenSSH DenyGroup directive - worked like
a charm!!!

Jorge Delacruz 

--- Jorge Delacruz <alterthegrid@yahoo.com> wrote:

> Yes, that is the plan - LDAP will manage user ID's
> and
> groups.  The trick is to prevent the user from
> logging
> in based on their group association.
> 
> JD
> 
> --- Rudolfo Munguia <xaruum@gmail.com> wrote:
> 
> > Just off of the top of my head,
> > 
> > Shouldn't you be able to add an attribute to your
> > server object denoting
> > group classification, and then have the users
> added
> > to the necessary group?
> > 
> > Been a few years since I dealt with LDAP.
> > 
> > On 10/11/07, Jorge Delacruz
> <alterthegrid@yahoo.com>
> > wrote:
> > >
> > > Excellent!  Thank you!
> > >
> > > JD
> > >
> > > --- "Jeremy C. Reed" <reed@reedmedia.net> wrote:
> > >
> > > > On Thu, 11 Oct 2007, Jorge Delacruz wrote:
> > > >
> > > > >   Anyone ever hear of such a module or means
> > that
> > > > will reject logins if
> > > > > a user is not in the right group?  The users
> > are
> > > > authenticated against
> > > > > LDAP, not local files.  This is an access
> > control
> > > > (authorization) issue,
> > > > > not an authentication issue.
> > > >
> > > > If you are using ssh server for logins, have a
> > look
> > > > at OpenSSH's
> > > > DenyGroups and AllowGroups configurations.
> > OpenSSH
> > > > uses getpwnam(3) to get
> > > > the details for the user to-be logged in.
> > > >
> > > > So use nsswitch to use ldap for group (and
> other
> > > > databases). Also setup
> > > > PAM to use pam_ldap.so also.
> > > >
> > > >   Jeremy C. Reed
> > > >
> >
> ---------------------------------------------------
> > > > PLUG-discuss mailing list -
> > > > PLUG-discuss@lists.plug.phoenix.az.us
> > > > To subscribe, unsubscribe, or to change your
> > mail
> > > > settings:
> > > >
> > >
> >
>
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> > > >
> > >
> > >
> > > Jorge Delacruz
> > >
> > >
> > >
> > >
> > >
> >
>
____________________________________________________________________________________
> > > Pinpoint customers who are looking for what you
> > sell.
> > > http://searchmarketing.yahoo.com/
> > >
> > >
> >
> ---------------------------------------------------
> > > PLUG-discuss mailing list -
> > PLUG-discuss@lists.plug.phoenix.az.us
> > > To subscribe, unsubscribe, or to change your
> mail
> > settings:
> > >
> >
>
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> > >
> > >
> ---------------------------------------------------
> > PLUG-discuss mailing list -
> > PLUG-discuss@lists.plug.phoenix.az.us
> > To subscribe, unsubscribe, or to change your mail
> > settings:
> >
>
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> 
> 
> Jorge Delacruz
> 
> 
>        
>
____________________________________________________________________________________
> Yahoo! oneSearch: Finally, mobile search 
> that gives answers, not web links. 
>
http://mobile.yahoo.com/mobileweb/onesearch?refer=1ONXIC
> 
> ---------------------------------------------------
> PLUG-discuss mailing list -
> PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail
> settings:
>
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> 



       
____________________________________________________________________________________
Looking for a deal? Find great prices on flights and hotels with Yahoo! FareChase.
http://farechase.yahoo.com/

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss