Re: [Freeipa-users] how can i give set of users to one particular host

2015-03-29 Thread Ben .T.George
HI i have compiled the pam_access modules successfuly and copied access.conf to /etc/security folder. i included other account requiredpam_access.so and added -:ben b...@infra.com:ALL but still user ben can able to access the machine anyone achieved this? On Tue, Mar 24, 2015 at

Re: [Freeipa-users] how can i give set of users to one particular host

2015-03-24 Thread Rob Crittenden
Ben .T.George wrote: > please anyone share bit more information on this like real example As we've said many times before, we have very little real experience on Solaris. We do the best we can and sometimes that is going to be in the form of bread crumbs that may be usable to finding your way to

Re: [Freeipa-users] how can i give set of users to one particular host

2015-03-24 Thread Ben .T.George
please anyone share bit more information on this like real example On Tue, Mar 24, 2015 at 9:03 PM, Rob Crittenden wrote: > Dmitri Pal wrote: > > On 03/24/2015 01:15 PM, Ben .T.George wrote: > >> Hi > >> > >> current stage is AD users can able to login to solaris box. But i > >> don't up to what

Re: [Freeipa-users] how can i give set of users to one particular host

2015-03-24 Thread Rob Crittenden
Dmitri Pal wrote: > On 03/24/2015 01:15 PM, Ben .T.George wrote: >> Hi >> >> current stage is AD users can able to login to solaris box. But i >> don't up to what level i can control the user. >> >> i don't think to there is much pan modules in solaris. still i cannot >> able to make home directory

Re: [Freeipa-users] how can i give set of users to one particular host

2015-03-24 Thread Dmitri Pal
On 03/24/2015 01:15 PM, Ben .T.George wrote: Hi current stage is AD users can able to login to solaris box. But i don't up to what level i can control the user. i don't think to there is much pan modules in solaris. still i cannot able to make home directory with pam. I think pam_groupdn (

Re: [Freeipa-users] how can i give set of users to one particular host

2015-03-24 Thread Ben .T.George
Hi current stage is AD users can able to login to solaris box. But i don't up to what level i can control the user. i don't think to there is much pan modules in solaris. still i cannot able to make home directory with pam. On Tue, Mar 24, 2015 at 4:42 PM, Dmitri Pal wrote: > On 03/24/2015

Re: [Freeipa-users] how can i give set of users to one particular host

2015-03-24 Thread Dmitri Pal
On 03/24/2015 07:20 AM, Ben .T.George wrote: HI i am using IPA 3.3 and my client is solaris 10. how can i give only some set of users to this client without creating user group in ad? thanks & Regards, Ben You can create a group in IPA and make Solaris check that group at the access pha