login capabilities mappings

[Egoitz Aurrekoetxea <egoitz [at] sarenet.es>]

Good afternoon,

Is it possible through nss-pam-ldapd to be able to store which login class in FreeBSD a users belongs to, in OpenLDAP ?. I needed it for assigning different MAC labels to each user. The login
capabilities in a login class to which a user belongs can be found in /etc/login.conf. For instance the default login class could be :


default:\
        :passwd_format=sha512:\
        :copyright=/etc/COPYRIGHT:\
        :welcome=/etc/motd:\
        :setenv=MAIL=/var/mail/$,BLOCKSIZE=K:\
        :path=/sbin /bin /usr/sbin /usr/bin /usr/games /usr/local/sbin /usr/local/bin ~/bin:\
        :nologin=/var/run/nologin:\
        :cputime=unlimited:\
        :datasize=unlimited:\
        :stacksize=unlimited:\
        :memorylocked=64K:\
        :memoryuse=unlimited:\
        :filesize=unlimited:\
        :coredumpsize=unlimited:\
        :openfiles=unlimited:\
        :maxproc=unlimited:\
        :sbsize=unlimited:\
        :vmemoryuse=unlimited:\
        :swapuse=unlimited:\
        :pseudoterminals=unlimited:\
        :priority=0:\
        :ignoretime@:\
        :umask=022:
        :label=biba/low(low-low),mls/low(low-low):

Is it possible to store login class in OpenLDAP for FreeBSD?.

Best regards,

--

Egoitz Aurrekoetxea

Departamento de sistemas

944 209 470
Parque Tecnológico. Edificio 103
48170 Zamudio (Bizkaia)

egoitz@sarenet.es

www.sarenet.es

Antes de imprimir este correo electrónico piense si es necesario hacerlo.

-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
https://lists.arthurdejong.org/nss-pam-ldapd-users/