Re: [Fedora-directory-users] Per-hos access

2009-05-11 Thread Michal Nosek
I'm not sure. You can set access control based on the client machine: http://tinyurl.com/ddtouz I can, but I must set one rule for each server. This is not simple, because we have 200 servers :-( -- Michal -- Fedora-directory-users mailing list Fedora-directory-users@redhat.com

[Fedora-directory-users] Wildcards in groupdn in ACIs

2009-05-11 Thread John A. Sullivan III
Hello, all. We are still refining how we want to deploy 389 in a multi-tenant environment. To grant access to the admins for each tenant to manage their own external contact lists, we created an ACI as follows: (targetattr = *) (target = ldap:///($dn),o=external,dc=ssiservices, dc=biz) (version

Re: [Fedora-directory-users] Per-hos access

2009-05-11 Thread Rich Megginson
Michal Nosek wrote: I'm not sure. You can set access control based on the client machine: http://tinyurl.com/ddtouz I can, but I must set one rule for each server. This is not simple, because we have 200 servers :-( Can you explain your problem a little more? -- Michal --

[Fedora-directory-users] FDS chaining

2009-05-11 Thread Randall Wood
I am attempting to chain to directory servers together, and am successful only if I disable proxied authorization. I can not find any resources that discuss how to make proxied authorization work other than iPlanet/Netscape/Sun/Fedora/Redhat Directory servers manuals, but I can not get it working.

[Fedora-directory-users] LDAP browsers

2009-05-11 Thread John A. Sullivan III
Hello, all. As we are planning to use 389 to hold external contact information for our users, we would like to give them the ability to browse their particular portions of the tree. May I ask what the various members of the list have used for a multi-distribution ldap administration tool? Luma

[Fedora-directory-users] test

2009-05-11 Thread Rich Megginson
test smime.p7s Description: S/MIME Cryptographic Signature -- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users

[389-users] Case sensitivity and FC9 389 DS packages.

2009-05-11 Thread James Chavez
Hello Rich, List, I have two inquiries. The first is regarding case sensitivity. I have the sudoers file centralized in LDAP (389) in one of the plants that I support. I have users listed by their uid as sudoUsers under the sudo roles. Now If the uid is listed as Joe_Montana..and I login as

Re: [389-users] Case sensitivity and FC9 389 DS packages.

2009-05-11 Thread Chris St. Pierre
On Mon, 11 May 2009, James Chavez wrote: Now If the uid is listed as Joe_Montana..and I login as Joe_Montana then the entry is recognized correctly by the sudo functions. If I login as joe_montana the sudo functions fail. Is there a way to force 389 to be case insensitive so that username or

Re: [389-users] Case sensitivity and FC9 389 DS packages.

2009-05-11 Thread James Chavez
On Mon, May 11, 2009 at 7:09 PM, Chris St. Pierre stpie...@nebrwesleyan.edu wrote: On Mon, 11 May 2009, James Chavez wrote: Now If the uid is listed as Joe_Montana..and I login as Joe_Montana then the entry is recognized correctly by the sudo functions. If I login as joe_montana the sudo