Try this:

http://www.redhat.com/resourcelibrary/whitepapers/netgroupwhitepaper

It talks about RedHat Directory Server but you can skip that part and go straight to the "Populating the Directory" portion and go from there. It mentions using NetGroups and PAM to facilitate access to systems based on group membership.

-Proto

On Wed, Oct 30, 2013 at 12:31 PM, Dheeraj Khanna dheerajk@zoosk.com wrote:

Hi

I wanted to find if I can add a host based authentication, here is my setup.

Regular LDAP DB , I use group and users and associate permissions to users based on groups. What I want to achieve is this:

*If a User A is a member of "Group A" and has access to "hostsA" allow else deny, this will allow me to limit access to certain server types based on user groups. I think we can define this in /etc/ldap.conf but I could not find find the right syntax to add hosts in this config file.*

*Question: *I do not know how to add this ou called "hostaccess", I used a GUI portal called Apache Directory Studio to add/delete users and groups.

If some one knows how to add hosts in LDAP and be able t map groups and users to it that would greatly help me.

Thanks

Dheera

Dheeraj Khanna wrote:

Thanks Michael

I could not see a specific config settings on ldap.conf which was shown in the document. Basically I want to add another level of authentication where I can configure my host's ldap.conf to reflect which user/groups can be allowed to access a specific host.

I am not able to find the correct syntax which needs to be entered in host's ldap.conf file

Better solution is to use slapo-nssov(5) and host/service authorization.

Please advise when you get a chance.

Thanks

Dheeraj

On Wed, Oct 30, 2013 at 10:12 AM, Michael Proto <michael.proto@tstllc.net mailto:michael.proto@tstllc.net> wrote:

Try this:

http://www.redhat.com/resourcelibrary/whitepapers/netgroupwhitepaper

It talks about RedHat Directory Server but you can skip that part and go
straight to the "Populating the Directory" portion and go from there. It
mentions using NetGroups and PAM to facilitate access to systems based on
group membership.


-Proto


On Wed, Oct 30, 2013 at 12:31 PM, Dheeraj Khanna <dheerajk@zoosk.com
<mailto:dheerajk@zoosk.com>> wrote:

    Hi

    I wanted to find if I can add a host based authentication, here is my
    setup.

    Regular LDAP DB , I use group and users and associate permissions to
    users based on groups. What I want to achieve is this:

    *If a User A is a member of "Group A" and has access to "hostsA" allow
    else deny, this will allow me to limit access to certain server types
    based on user groups. I think we can define this in /etc/ldap.conf but
    I could not find find the right syntax to add hosts in this config file.*

    *Question: *I do not know how to add this ou called "hostaccess", I
    used a GUI portal called Apache Directory Studio to add/delete users
    and groups.

    If some one knows how to add hosts in LDAP and be able t map groups
    and users to it that would greatly help me.

    Thanks

    Dheera