In fact this is really easy :)
What I normally do is create one group in LDAP for users who may log on to SSGD and other groups in LDAP linked to Application Groups in SSGD to specify who sees what application.
The first can be configured by editing the config using:
tarantella config edit --searchldapla.properties-searchFilter (&({0}={1})(<attribute_test>))
Where <attribute test> can be something like "allowttalogin=true" or a group memberschip test. "groupMembership=cn=Group,ou=OU_ofGroup,...)
To speed up the LDAP-lookup use:
/opt/tarantella/bin/tarantella config edit -searchldapla.properties-searchAttributes uid
An application (or a group containing applications) can be linked to:
- LDAP Users ( http://docs.sun.com/source/820-1088/attr_scottamemberusers.html)
- LDAP Groups ( http://docs.sun.com/source/820-1088/attr_scottamembergroups.html)
- LDAP Filter ( http://docs.sun.com/source/820-1088/attr_scottamembersearch.html)
I normally use the LDAP-filter since it has more flexibility.
If you need more info, just reply to this mailing-list.
Greetz,
Remold @ Everett
At 19:31 3-6-2007, you wrote:
Hi List.
Hoping someone might be able to point me in the right direction on this
one...
I have 3500+ LDAP Users that I am setting up and SGD Farm for..
I have run SGD for some time on a much smaller scale but now the 'Big Wigs'
want me to do it on a larger scale...
This means that I now have a myriad of apps that are needed by different
sets of users..
For example, I would like Staff to see an App Link for our MIS System..
But of course I would Not like our Students to see this link..
I really do not want to have to replicate my LDAP user base in ENS just
To get this to work..
So my question is:-
Is there any way I can assign an App to an LDAP Group via SGD ?
Any Help pointers/comments/welcome..
Best Regards
Gavin Spurgeon
Systems Administrator
Leigh City Technology College
[EMAIL PROTECTED]
http://www.leighctc.kent.sch.uk
Tel: 01322 620501
Fax: 01322 620599
IS HelpDesk : Ext 541
--
This message has been scanned for viruses and
dangerous content by the Systems @ the LeighCTC,
and is believed to be clean.
_______________________________________________
SGD-Users mailing list
[email protected]
http://node1.filibeto.org/mailman/listinfo/sgd-users
_______________________________________________ SGD-Users mailing list [email protected] http://node1.filibeto.org/mailman/listinfo/sgd-users
