Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Scenario:

We have user user1, user2, user3 and user4 in LDAP. And Linux machines linux1, linux2, linux3, linux4, ... linux50 is in this LDAP domain.

Now the problem is:

How to limit user1 to only have permission to logon linux1, linux2, linux3, and linux 4 only? The other users (user2, user3, user4) can logon to all of these machines (this is trivial, we already have it).

share|improve this question

migrated from superuser.com Dec 21 '10 at 7:42

This question came from our site for computer enthusiasts and power users.

add comment

1 Answer

The simplest way would be to create two LDAP groups, e.g. "tester" and "developer", or whatever.

Then on linux2, linux3, and linux4, you would add

pam_groupdn "developers"

to /etc/ldap.conf.

See http://linux.die.net/man/5/pam_ldap for more details.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.