Sponsored Content
Top Forums UNIX for Advanced & Expert Users pam ldap limit authentication Post 79870 by hassan1 on Monday 1st of August 2005 06:59:43 PM
Old 08-01-2005
Network pam ldap limit authentication

I have a linux machine which authenticate users to ldap, this is working fine. But I would like to limit users that logon to the machines to just the system admins.
The machines hosts different web sites which users accessed from there home directory like http://foo.mdx.ac.uk/~username

At the monent my /etc/ldap.conf has
nss_base_passwd o=mdx?sub?groupMembership=cn=linux_servers,ou=access-grou
ps,ou=UNIX,ou=services,ou=staff,o=mdx

nss_base_shadow o=mdx?sub?groupMembership=cn=linux_servers,ou=access-grou
ps,ou=UNIX,ou=services,ou=staff,o=mdx

nss_base_group ou=group,ou=sun.mdx.ac.uk,ou=nis,ou=services,ou=unix,ou=service
s,ou=staff,o=mdx?one

I would like to limit authentication to cn=linux_admin but if I change the above /etc/ldap.conf to cn=linux_admin users will not be able to get there web site.

Using PAM, how do I limit authentication to all services just to cn=linux_admin, while normal user still be able to access there web site through http://foo.mdx.ac.uk/~username

Thanks Smilie Smilie
 

10 More Discussions You Might Find Interesting

1. Programming

PAM Authentication Sample

Hi, I am a Linux / Unix newbie c programmer. I have a c/c++ daemon server that will receive authentication (userid / password) from a windows client. All I want to do is authenticate the user via PAM API - i.e. user must exist on the Unix / Linux system + password must be validated. ... (1 Reply)
Discussion started by: vineshp
1 Replies

2. UNIX for Advanced & Expert Users

PAM LDAP Passwort

Hallo miteinander, ich bin gerade dabei ein eigenes C-Programm zuschreiben um mich über PAM auf einen LDAP Server zu authentifizieren. ... (2 Replies)
Discussion started by: saschaLin
2 Replies

3. Solaris

nisplus and pam authentication

HI, There is a user having problem when he try to login to solaris box, it works after few tried. What may be the problem? PAM authentication Password: PAM authentication Password: PAM authentication New Password: (1 Reply)
Discussion started by: mokkan
1 Replies

4. Solaris

Soalris 10 PAM Radius authentication Module

Hello Group, I'm facing Problem with the configuration of "***pam_radius_auth.so.1***" module to be integrated with Freeradius and Funk Steel Belted Radius. Both this radius servers are able to make "Access-Accept" packet. But the SSH or Telnet client is not able to login to the system with the... (0 Replies)
Discussion started by: ImpeccableCode
0 Replies

5. UNIX for Advanced & Expert Users

PAM authentication failure

My PAM module seems to work right but it fails in authentication. Althought it can't authenticate, the session module works and the software who uses it executes well. For example, when I login through "gdm" using pam to authenticate against an ldap server /var/log/auth.log shows Any... (1 Reply)
Discussion started by: capibolso
1 Replies

6. UNIX and Linux Applications

Problems Hooking Sudoers into PAM/LDAP

Greetings!! I am attempting to solve a rather thorny issue and I was hoping that someone might have some insight into what is going on here.. At this point I have an openLDAP server that is working quite splendidly! :) I have a working directory with users able to authenticate it and TLS... (2 Replies)
Discussion started by: bluethundr
2 Replies

7. UNIX for Advanced & Expert Users

PAM authentication.

I have applied pam authentication for local users as highlighted in below file. # cat /etc/pam.d/system-auth #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required pam_env.so auth sufficient pam_unix.so... (0 Replies)
Discussion started by: pinga123
0 Replies

8. Solaris

LDAP, PAM or SSHD?

Hi, I´m trying to make Solaris authenticate users in AD. NTP is working, nsswitch.ldap is listed above, DNS is Ok and I made something different in pam.conf, krb5.conf and sshd_config (see above) nsswitch.ldap: passwd: files ldap group: files ldap hosts: files dns ipnodes: ... (0 Replies)
Discussion started by: mpcavalcanti
0 Replies

9. SuSE

Authentication with PAM

Hello all, I recently updated PAM policy files (pam_authz.policy) on HP-UX Servers with AD groups involving allowing and denying the certain groups.. Could anyone tell me what is the equivalent mechanism in SLES(Linux)? Is it possible to allow/deny AD group access with the SLES LDAP... (0 Replies)
Discussion started by: lcclaj0
0 Replies

10. UNIX for Advanced & Expert Users

Configure samba with PAM point 2 different LDAP

Hi, I would like to configure samba with PEM (with LDAP). I've already found, on the server, configured the PAM Authentication(with LDAP) for ssh. I wanted to know if it was possible to configure PAM for to authenticate to another LDAP only for SAMBA. Is possibile duplicate the... (2 Replies)
Discussion started by: mark888
2 Replies
disco(1)						      General Commands Manual							  disco(1)

NAME
disco - Mono's Web Service Discovery Tool SYNOPSIS
disco [options] url DESCRIPTION
disco is a tool for discovering web services and for retireving the documents that describe those services. url is the location of a DISCO document, which includes a list of WSDL documents, XML schemas and references to other DISCO documents. disco downloads the DISCO document and all referenced documents (unless the -nosave option is specified), and saves them to disk. OPTIONS
The following options are available: -nologo Supress the startup logo. -nosave Do not save the discovered documents to disk. The default is to save the documents. -o:directory , -out:directory The directory where to save the discovered documents. By default, documents are saved in the current directory. -u:username , -user:username The user name to use when connecting to the server. -p:password , -password:password The password to use when connecting to the server. -d:domain , -domain:domain The domain to use when connecting to the server. -proxy:url The url of the proxy server to use for http requests. -proxyusername:username The user name to use when connecting to the proxy. -proxypassword:password The password to use when connecting to the proxy. -proxydomain:domain The domain to use when connecting to the proxy. AUTHORS
Lluis Sanchez Gual (lluis@ximian.com) LICENSE
disco is released under the terms of the GNU GPL. SEE ALSO
wsdl(1), soapsuds(1), mono(1), mcs(1) disco(1)
All times are GMT -4. The time now is 02:40 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy