New subject: OpenLdap Protocol - 10 hours

Friday, 24 June 2011

On Sat, 18 Jun 2011 22:13 -0700, "Hai Tao" <taoh666(a)hotmail.com&gt; wrote:
...

 Yes, I tried to add a host attribute, but I got object class violation
 error. Any idea?

 Thanks.

 Hai Tao

Did you ever resolve this?  You don't mention which OS you are using,
but in standard RH5 you can do try this.

1. Install nss_ldap
2. copy /usr/share/doc/nss_ldap-253/ldapns.schema
/etc/openldap/schema/ldapns.schema
     This will provide the hostObject objectClass
3. In slapd.conf
  include         /etc/openldap/schema/ldapns.schema
4. In a users ldap record add
objectClass: hostObject
5. In the users ldap record add
host: hostname
6. Modify the hosts ldap.conf file:
 pam_check_host_attr yes

Doing this from memory, but I think that should be enough to get what
you want to work on a RH5 system.  RH6 uses some different files on the
host.  BTW, you can also use the account objectClass to provide the host
attribute, but my guess is that it will most likely conflict with
another structural object class. 

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

RE: allow or deny certain user access to certain hosts