Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 15 Feb 2008 09:09:23 +0100 (CET)
From:      "Ganael LAPLANCHE" <ganael.laplanche@martymac.com>
To:        Olivier Nicole <on@cs.ait.ac.th>, jontheil@gmail.com
Cc:        dmehler26@woh.rr.com, freebsd-questions@freebsd.org
Subject:   Re: LDAP user authentication?
Message-ID:  <20080215080621.M31110@martymac.com>
In-Reply-To: <200802150245.m1F2jN6A013811@banyan.cs.ait.ac.th>
References:  <8f82c35c0802131110l7c678965qe6d0c3432f008254@mail.gmail.com> <000301c86ed2$17177560$0200a8c0@satellite> <8f82c35c0802140420w57a1d5dfpd12b86e57efd585d@mail.gmail.com> <200802150245.m1F2jN6A013811@banyan.cs.ait.ac.th>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 15 Feb 2008 09:45:23 +0700 (ICT), Olivier Nicole wrote

Hi Olivier,

> Though I am looking one step ahead, how to allow a user to
> authenticate to this machine and not that machine, using the same ldap
> directory.

You can override attributes in you /usr/local/etc/nss_ldap.conf.

Something like this :

nss_override_attribute_value homeDirectory /dev/null
nss_override_attribute_value loginShell /usr/bin/false
nss_override_attribute_value userPassword x

should prevent users from login on your machine.

Best regards,

Ganaël LAPLANCHE
ganael.laplanche@martymac.com
http://www.martymac.com




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080215080621.M31110>