Dear,

I'm porting my working areas authentication on 389-ds. I've nominal
user credential and project credential. So I have user and project
that has the same POSIX ID but different POSIX group and OU.

EG: 
morelli PosixID: 1000 groupID: 100 OU: Technical Staff
java    PosixID: 1000 groupID: 900 OU: Project Research

Now under Linux, if I login with my credential I find that all my files
are of the java project user.

In the systems sssd.conf I have:

access_provider = ldap
ldap_access_order = filter
ldap_access_filter = (gidNumber=100)

Is it possible to avoid this problem? I want that in some machine only
components of a determined group is able to login. The other
users/groups hasn't to be visible.

Thanks
-- 
-------------------------------------------------------------
  Enrico Morelli
  System Administrator | Programmer | Web Developer

  CERM - Polo Scientifico
  Via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
  phone: +39 055 457 4269
  fax:   +39 055 457 4927
-------------------------------------------------------------
--
389 users mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/389-users

Reply via email to