Hi Shamika,<br><br>there are some examples in the faq-o-meter how to use dynlists. <a href="http://www.openldap.org/faq/data/cache/1209.html">Take a look here.</a><br><br>Here is a example of my config to do this:<br><br><b>cat /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb/</b><b>olcOverlay\=\{0\}dynlist.ldif</b><br>

dn: olcOverlay={0}dynlist<br>objectClass: olcOverlayConfig<br>objectClass: olcConfig<br>objectClass: top<br>objectClass: olcDynamicList<br>olcOverlay: {0}dynlist<br>olcDlAttrSet: {0}posixGroup labeledURI memberUid:uid<br>

<br>dn: cn=users,ou=People,ou=Groups,dc=example,dc=com<br>structuralObjectClass: posixGroup<br>objectClass: posixGroup<br>objectClass: labeledURIObject<br>objectClass: top<br>memberUid: username1<br>memberUid: username2<br>

memberUid: username3<br>memberUid: username4<br>memberUid: username5<br>cn: users<br>gidNumber: 1100<br>labeledURI: ldap:///ou=Users,dc=example,dc=com?uid?sub?(objectClass=posixAccount)<br><br>if you have username1 to 5 in ou=Users,dc=example,dc=com with uid&#39;s like this and the objectClass posixAccount.<br>

<br>Maybe you can modify that to your needs.<br><br>Bye,<br><br><div class="gmail_quote">On Thu, Apr 1, 2010 at 15:19, Shamika Joshi <span dir="ltr">&lt;<a href="mailto:shamika.joshi@gmail.com">shamika.joshi@gmail.com</a>&gt;</span> wrote:<br>

<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">Hi<br>The desired implementation is to control user logins on different lab machines based on the project groups. <br>

Scenario: Bob is part of project group &#39;mars&#39; &amp; John is part of &#39;venus&#39; then I have added lab machines x1-x3 to group &#39;mars&#39; &amp; y1-y3 to group venus. Now I want John to only access machines allocated for project &#39;mars&#39; i.e x1 to x3 &amp; John to access machines allocated for &#39;venus&#39; i.e y1 to y3<br>


<br>I went through <a href="http://www.hurricanelabs.com/september2009_login_security_using_openldap_and_pam" target="_blank">this link</a> learned that it can be achieved using &quot;overlay dynlist&quot;. Please correct me if I&#39;ve got it wrong.<br>


However my lab server is Ubuntu 9.10 (karmic koala) and it is using slapd.d (not slapd.conf)<br>So now if I want to attempt to use &quot;overlay dynlist&quot; how should I go about it? Has anyone done this before? Any help will be appreciated.<br>


<br>Thanks<br><font color="#888888">Shamika<br>
</font></blockquote></div><br><br clear="all"><br>-- <br>To be or not to be -- Shakespeare | To do is to be -- Nietzsche | To be is to do -- Sartre | Do be do be do -- Sinatra<br><br>