Login or Register to Ask a Question and Join Our Community


AIX

Access control using LDAP

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems AIX Access control using LDAP
# 1  
Old 03-18-2010
Access control using LDAP
Hello,

I've configurated a LDAP user authentication on AIX V6 against Active Directory (Windows Server 2008).

The Tree is built as follows:

test (DC)
|--- testgroup (group with members: user1, user2)
|
|--- sys1 (OU)
| |--- sys1group (group with member: user1)
|
|--- sys2 (OU)
| |--- sys2group (group with member: user2)

How is the LDAP Client to configurate that only members of sys1group have access to the AIX system?

I do NOT want to: - change the /etc/security/user file
- move user1 to OU sys1


I have set the groubasedn to dc=test in the ldap.cfg (not to cn=sys1group,ou=sys1,dc=test) because the testgroup should be also detected.

Is there the posibility to set a path to a group which is only used while authentication to grant access to the members?
There are also the parameters hostbasedn and authbasedn in the ldap.cfg but I don't know how to use them.

Has anyone an idea?

Thank you in advance.
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Proxy Server

How to use Squid on Linux to control certain IP to access Web Server and certain IP cannot access?

Dear all experts here, :) I would like to install a proxy server on Linux server to perform solely to control the access of Web server. In this case, some of my vendor asked me to try Squid and I have installed it onto my Linux server. I would like know how can I set the configuration to... (1 Reply)
Discussion started by: kwliew999
1 Replies

2. Red Hat

Authentication for USB Access from ldap server as centralised

HI All, Kindly help me to configure the ldap server which is used to authenticate my all cleints from usd access..I need to block all the usb access to the clients... RHEL5.4 (1 Reply)
Discussion started by: selvaforum
1 Replies

3. UNIX and Linux Applications

User Based LDAP Client Access

Hi everyone, I am not that familiar with LDAP advanced contents. But since it is a popular secure tool for authentication, I preferred to user RedHat LDAP. The organization has 5 organizational units. There are 3 client servers and I want to limit each client to access different users. So, I... (3 Replies)
Discussion started by: royalliege
3 Replies

4. UNIX for Dummies Questions & Answers

eTrust Access Control

Hi, I am using eTrust Access Control at work. I have got no output after type checklogin. I wonder what is the reason. Does anyone know? Thanks eTrustAC selang v8.00a-1555.13 - eTrustAC command line interpreter Copyright (c) 2006 CA. All rights reserved. eTrustAC> checklogin user1... (0 Replies)
Discussion started by: uuontario
0 Replies

5. UNIX for Dummies Questions & Answers

Internet Access Control

I need to control intenet access @ work. xample. I need PC 1 to only be able to access these five sites and add to the list as needed. Can anyone pint me a direction. (1 Reply)
Discussion started by: fruiz
1 Replies

6. UNIX for Dummies Questions & Answers

Does U*X have Access Control Lists?

In OS like windows, I can define an Access Control List (ACL) and specify which accounts and groups have what access to a specific file. I assume U*X, Linux and cygwin on windows have this ACL feature too. I'm using cygwin on windows. What do I type at a bash prompt to allow a specific user... (1 Reply)
Discussion started by: siegfried
1 Replies

7. Shell Programming and Scripting

Access Control List

Hey all, I have a directory (own by user: b; group: grpB) which I want a user (user: a; group: grpA) to be able to read and execute from, I wonder if I should add user a to this particular directory's ACL or that I would add group grpB to user a's subgroup? I would like to know the difference... (3 Replies)
Discussion started by: mpang_
3 Replies

8. UNIX for Advanced & Expert Users

LDAP Authentication for access to a folder

I am struggling with finding a way of securing a unix folder by controlling access to it by a LDAP Group. In simpler terms,I am looking forward to see a username password prompt,when a specific unix folder is accessed. That UserID and password ,should be authenticated by a secure directory (via... (1 Reply)
Discussion started by: sunmatts
1 Replies

9. UNIX for Dummies Questions & Answers

Access control Lists

Hi, I was wondering if someone could help me with ACL's. I have a file, say output, created by the root user, member of group other. Its permissions are rwxr--r--. I want only people in group other to have rwx access, but I also want one other user, stephen, member of some_other_group to have rwx... (1 Reply)
Discussion started by: sroberts82
1 Replies

10. Filesystems, Disks and Memory

Access Control

In Windows XP, there are 3 default access control groups namely: Administrators, Users and Power Users. Is there default access control groups in Unix system? If there is, what are they? newbie. (1 Reply)
Discussion started by: zertoir
1 Replies
Login or Register to Ask a Question

LEARN ABOUT MOJAVE

net::ldap::control::passwordpolicy

Net::LDAP::Control::PasswordPolicy(3)			User Contributed Perl Documentation		     Net::LDAP::Control::PasswordPolicy(3)

NAME

       Net::LDAP::Control::PasswordPolicy - LDAPv3 Password Policy control object

SYNOPSIS

	use Net::LDAP;
	use Net::LDAP::Control::PasswordPolicy;
	use Net::LDAP::Constant qw( LDAP_CONTROL_PASSWORDPOLICY );

	$ldap = Net::LDAP->new( "ldap.example.com" );

	$pp = Net::LDAP::Control::PasswordPolicy->new;

	$mesg = $ldap->bind( "cn=Bob Smith,dc=example,dc=com",
			     password => "secret",
			     control => [ $pp ] );

	# Get password policy response
	my($resp)  = $mesg->control( LDAP_CONTROL_PASSWORDPOLICY );

	if (defined($resp)) {
	  my $v = $resp->pp_error;
	  print "Password policy error $v
"  if defined $v;
	  $v = $resp->time_before_expiration;
	  print "Password expires in $v second(s)
"  if defined $v;
	}

DESCRIPTION

       "Net::LDAP::Control::PasswordPolicy" provides an interface for the creation and manipulation of objects that represent
       "PasswordPolicyRequest"s and "PasswordPolicyResponse"s as described by draft-behera-password-policy-09.

       This control can be passed to most operations, including the bind.

CONSTRUCTOR ARGUMENTS

       There are no constructor arguments other than those provided by Net::LDAP::Control.

METHODS

       time_before_expiration
	   If defined, this is an integer value holding the time left in seconds before the account's password will expire.

       grace_authentications_remaining
	   If defined, this is an integer value holding the number of authentication requests allowed before the account is locked.

       pp_error
	   If defined, this contains a more detailed error code for the account.  See Net::LDAP::Constant for definitions of each.  Values can
	   include:

	   LDAP_PP_PASSWORD_EXPIRED
	   LDAP_PP_ACCOUNT_LOCKED
	   LDAP_PP_CHANGE_AFTER_RESET
	   LDAP_PP_PASSWORD_MOD_NOT_ALLOWED
	   LDAP_PP_MUST_SUPPLY_OLD_PASSWORD
	   LDAP_PP_INSUFFICIENT_PASSWORD_QUALITY
	   LDAP_PP_PASSWORD_TOO_SHORT
	   LDAP_PP_PASSWORD_TOO_YOUNG
	   LDAP_PP_PASSWORD_IN_HISTORY

SEE ALSO

       Net::LDAP, Net::LDAP::Control, Net::LDAP::Constant, draft-behera-ldap-password-policy-09.txt

AUTHOR

       Chris Ridd <chris.ridd@isode.com>

       Please report any bugs, or post any suggestions, to the perl-ldap mailing list <perl-ldap@perl.org>

COPYRIGHT

       Copyright (c) 2008 Chris Ridd. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same
       terms as Perl itself.

perl v5.18.2							    2013-07-21				     Net::LDAP::Control::PasswordPolicy(3)