From owner-freebsd-questions@FreeBSD.ORG  Fri Feb 15 10:01:41 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id B1BD816A417
	for <freebsd-questions@freebsd.org>;
	Fri, 15 Feb 2008 10:01:41 +0000 (UTC)
	(envelope-from norman@apache.org)
Received: from vs159071.vserver.de (hiphopcorner.de [62.75.159.71])
	by mx1.freebsd.org (Postfix) with ESMTP id 62B2013C468
	for <freebsd-questions@freebsd.org>;
	Fri, 15 Feb 2008 10:01:41 +0000 (UTC)
	(envelope-from norman@apache.org)
Received: from [192.168.0.29] (IP-213157018232.static.heagmedianet.de
	[213.157.18.232])
	by vs159071.vserver.de (Postfix) with ESMTP id 8A29ABE855C;
	Fri, 15 Feb 2008 10:01:39 +0000 (UTC)
From: Norman Maurer <norman@apache.org>
To: Olivier Nicole <on@cs.ait.ac.th>
In-Reply-To: <200802150245.m1F2jN6A013811@banyan.cs.ait.ac.th>
References: <8f82c35c0802131110l7c678965qe6d0c3432f008254@mail.gmail.com>
	<000301c86ed2$17177560$0200a8c0@satellite>
	<8f82c35c0802140420w57a1d5dfpd12b86e57efd585d@mail.gmail.com>
	<200802150245.m1F2jN6A013811@banyan.cs.ait.ac.th>
Content-Type: text/plain
Date: Fri, 15 Feb 2008 11:01:30 +0100
Message-Id: <1203069690.6736.7.camel@norman-laptop>
Mime-Version: 1.0
X-Mailer: Evolution 2.12.1 
Content-Transfer-Encoding: 7bit
Cc: dmehler26@woh.rr.com, jontheil@gmail.com, freebsd-questions@freebsd.org
Subject: Re: LDAP user authentication?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Feb 2008 10:01:41 -0000


Am Freitag, den 15.02.2008, 09:45 +0700 schrieb Olivier Nicole:
> Hi,
> 
> >  >I have googled for a very long time, but I haven't found any useful
> >  > howto on this issue. Well, there is
> >  > http://www.cultdeadsheep.org/FreeBSD/docs/Quick_and_dirty_FreeBSD_5_x_and_nss_ldap_mini-HOWTO.html
> >  > but that seems to be a bit confusing an not up-to-date. I guess it
> >  > _should_ be possible - and indeed very useful (especially combinde
> >  > with Samba PDC and an easily maintainlable mail server). So please, if
> 
> I read through the link you gave. My first impression is:
> 
> - pam-ldap is used for authentication: allow the user to login to the
>   machine
> 
> - nss-ldap is used by the system when it needs to resolve things like
>   gid<->group name, user home directory, etc.
> 
> I will give it a try soon.
> 
> Though I am looking one step ahead, how to allow a user to
> authenticate to this machine and not that machine, using the same ldap
> directory.
> 
> Bests,
> 
> Olivier
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"

You can use the pam_filter option for this..

bye
Norman