Dear,
I'm porting my working areas authentication on 389-ds. I've nominal
user credential and project credential. So I have user and project
that has the same POSIX ID but different POSIX group and OU.
EG:
morelli PosixID: 1000 groupID: 100 OU: Technical Staff
java PosixID: 1000 groupID: 900 OU: Project Research
Now under Linux, if I login with my credential I find that all my files
are of the java project user.
In the systems sssd.conf I have:
access_provider = ldap
ldap_access_order = filter
ldap_access_filter = (gidNumber=100)
Is it possible to avoid this problem? I want that in some machine only
components of a determined group is able to login. The other
users/groups hasn't to be visible.
Thanks
--
-------------------------------------------------------------
Enrico Morelli
System Administrator | Programmer | Web Developer
CERM - Polo Scientifico
Via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
phone: +39 055 457 4269
fax: +39 055 457 4927
-------------------------------------------------------------