Re: [nssldap] restricting users to certain hosts?

[Ralf Haferkamp <rhafer [at] suse.de>]

On Dienstag, 4. März 2008, Adam Williams wrote:
> I've got several servers...arrowhead, archives3, saxon, etc.  I want
> to prevent the users from ssh'ing into certain servers.  some should
> only be able to ssh to arrowhead, others only to archives3, some can
> access 2 out of the 3, or all 3, etc.  Is it possible to have this
> configuration?  If so, how?
Yes. Check out the pam_check_host_attr and pam_check_service_attr of 
pam_ldap. See the pam_ldap man-page for details.

-- 
Ralf Haferkamp

SUSE LINUX Products GmbH,  GF: Markus Rex, HRB 16746 (AG Nuernberg)