Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Hi I'm newbie on LDAP but I was able to follow ubuntu's installation guide, add few user using posixgroup then successfully accessed the ssh using the created account.

Now, lets say I have user1, and its connected to ssh with rbash shell, but still user1 can view all the files even although no edit permission.

Is there a way I can restrict user1 to only read/view his own file?

share|improve this question
    
user1 can view all the files even although no edit permission. Am I missing something? View permissions and edit permissions are different things. –  HopelessN00b Oct 8 '12 at 1:46
add comment

1 Answer

I don't think the permissions you are having an issue with are stored in LDAP, so much as in the filesystem. LDAP will only keep track of a user's permissions in LDAP (generally) and their groups.

If you want the user to be unable to read some files, make sure those files are not world-readable (the last bit of the file's mode should be 0, or more pedantically, the fours bit should not be set). Good practice is to make people's home directories this way by default. Bear in mind also that on directories the +x permission bit is traversal.

Ensure also that the user you're thinking of doesn't have any groups that would allow him to read files you don't want him to read.

There is simply no facility for denying access to files in this manner using POSIX file permissions, especially not through LDAP; you just have to ensure access is not granted in the first place.

You should consider reading up on chmod and chown, if you aren't already familiar with them.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.