Re: Server authentication

Yes, that is the plan - LDAP will manage user ID's and
groups. The trick is to prevent the user from logging
in based on their group association.

JD

--- Rudolfo Munguia <xaruum@gmail.com> wrote:

> Just off of the top of my head,
>
> Shouldn't you be able to add an attribute to your
> server object denoting
> group classification, and then have the users added
> to the necessary group?
>
> Been a few years since I dealt with LDAP.
>
> On 10/11/07, Jorge Delacruz <alterthegrid@yahoo.com>
> wrote:
> >
> > Excellent! Thank you!
> >
> > JD
> >
> > --- "Jeremy C. Reed" <reed@reedmedia.net> wrote:
> >
> > > On Thu, 11 Oct 2007, Jorge Delacruz wrote:
> > >
> > > > Anyone ever hear of such a module or means
> that
> > > will reject logins if
> > > > a user is not in the right group? The users
> are
> > > authenticated against
> > > > LDAP, not local files. This is an access
> control
> > > (authorization) issue,
> > > > not an authentication issue.
> > >
> > > If you are using ssh server for logins, have a
> look
> > > at OpenSSH's
> > > DenyGroups and AllowGroups configurations.
> OpenSSH
> > > uses getpwnam(3) to get
> > > the details for the user to-be logged in.
> > >
> > > So use nsswitch to use ldap for group (and other
> > > databases). Also setup
> > > PAM to use pam_ldap.so also.
> > >
> > > Jeremy C. Reed
> > >
> ---------------------------------------------------
> > > PLUG-discuss mailing list -
> > > PLUG-discuss@lists.plug.phoenix.az.us
> > > To subscribe, unsubscribe, or to change your
> mail
> > > settings:
> > >
> >
>
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> > >
> >
> >
> > Jorge Delacruz
> >
> >
> >
> >
> >
>
____________________________________________________________________________________
> > Pinpoint customers who are looking for what you
> sell.
> > http://searchmarketing.yahoo.com/
> >
> >
> ---------------------------------------------------
> > PLUG-discuss mailing list -
> PLUG-discuss@lists.plug.phoenix.az.us
> > To subscribe, unsubscribe, or to change your mail
> settings:
> >
>
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> >
> >
---------------------------------------------------
> PLUG-discuss mailing list -
> PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail
> settings:
>
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss


Jorge Delacruz



____________________________________________________________________________________
Yahoo! oneSearch: Finally, mobile search
that gives answers, not web links.
http://mobile.yahoo.com/mobileweb/onesearch?refer=1ONXIC

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss