I was interested to create groups to use for authenticated access. Say for instance I configure samba to use FDS, can it actually use those groups to control permissions? What about the gidnumber? This all the docs had to say about it:
5.4. Using Groups
Groups are a mechanism for associating entries for ease of administration. This mechanism was provided with previous versions of Directory Server and should be used primarily for compatibility with older versions of the server.
solarflow99 wrote:
I was interested to create groups to use for authenticated access. Say for instance I configure samba to use FDS, can it actually use those groups to control permissions? What about the gidnumber? This all the docs had to say about it:
5.4. Using Groups
Groups are a mechanism for associating entries for ease of administration. This mechanism was provided with previous versions of Directory Server and should be used primarily for compatibility with older versions of the server.
See http://tinyurl.com/3yo88r and http://tinyurl.com/2snfle and http://tinyurl.com/337g46 for some examples using groups with ACIs.
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
I don't see this actually doing group control, it looks more like access control within the LDAP tree itself.
On 2/29/08, Rich Megginson rmeggins@redhat.com wrote:
solarflow99 wrote:
I was interested to create groups to use for authenticated access. Say for instance I configure samba to use FDS, can it actually use those groups to control permissions? What about the gidnumber? This all the docs had to say about it:
5.4. Using Groups
Groups are a mechanism for associating entries for ease of administration. This mechanism was provided with previous versions of Directory Server and should be used primarily for compatibility with older versions of the server.
See http://tinyurl.com/3yo88r and http://tinyurl.com/2snfle and http://tinyurl.com/337g46 for some examples using groups with ACIs.
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
solarflow99 wrote:
I don't see this actually doing group control, it looks more like access control within the LDAP tree itself.
What do you mean by "group control"? Something like Group Policy in Active Directory?
On 2/29/08, *Rich Megginson* <rmeggins@redhat.com mailto:rmeggins@redhat.com> wrote:
solarflow99 wrote: > I was interested to create groups to use for authenticated access. > Say for instance I configure samba to use FDS, can it actually use > those groups to control permissions? What about the gidnumber? This > all the docs had to say about it: > > > > 5.4. Using Groups > > Groups are a mechanism for associating entries for ease of > administration. This mechanism was provided with previous versions of > Directory Server and should be used primarily for compatibility with > older versions of the server. > See http://tinyurl.com/3yo88r and http://tinyurl.com/2snfle and http://tinyurl.com/337g46 for some examples using groups with ACIs. > > > > ------------------------------------------------------------------------ > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com <mailto:Fedora-directory-users@redhat.com> > https://www.redhat.com/mailman/listinfo/fedora-directory-users > -- Fedora-directory-users mailing list Fedora-directory-users@redhat.com <mailto:Fedora-directory-users@redhat.com> https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
not even that complex. Just a logical grouping like unix groups work. Do the groups in FDS work like that if I add users in them?
I think i've almost got it working with samba from the howto, but where to create the groups and map them I still don't understand.
On 3/4/08, Rich Megginson rmeggins@redhat.com wrote:
solarflow99 wrote:
I don't see this actually doing group control, it looks more like access control within the LDAP tree itself.
What do you mean by "group control"? Something like Group Policy in Active Directory?
On 2/29/08, *Rich Megginson* <rmeggins@redhat.com mailto:rmeggins@redhat.com> wrote:
solarflow99 wrote: > I was interested to create groups to use for authenticated access. > Say for instance I configure samba to use FDS, can it actually use > those groups to control permissions? What about the gidnumber? This > all the docs had to say about it: > > > > 5.4. Using Groups > > Groups are a mechanism for associating entries for ease of > administration. This mechanism was provided with previous versions of > Directory Server and should be used primarily for compatibility
with
> older versions of the server. > See http://tinyurl.com/3yo88r and http://tinyurl.com/2snfle and http://tinyurl.com/337g46 for some examples using groups with ACIs. > > > >
> > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com <mailto:Fedora-directory-users@redhat.com> > https://www.redhat.com/mailman/listinfo/fedora-directory-users > -- Fedora-directory-users mailing list Fedora-directory-users@redhat.com <mailto:Fedora-directory-users@redhat.com> https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
Yes, groups works exactly as local groups.
In fact, you must ensure that your users belongs to the right group or you may have problems accessing samba shares.
Para "General discussion list for the Fedora Directory server solarflow99 project." solarflow99@gmail.com <fedora-directory-users@redhat.c Enviado por: om> fedora-directory-users-b cc ounces@redhat.com Asunto 04/03/2008 02:53 p.m. Re: [Fedora-directory-users] groups Clasificación Uso Interno Por favor, responda a "General discussion list for the Fedora Directory server project." <fedora-directory-users@ redhat.com>
not even that complex. Just a logical grouping like unix groups work. Do the groups in FDS work like that if I add users in them?
I think i've almost got it working with samba from the howto, but where to create the groups and map them I still don't understand.
On 3/4/08, Rich Megginson rmeggins@redhat.com wrote: solarflow99 wrote: > I don't see this actually doing group control, it looks more like > access control within the LDAP tree itself. What do you mean by "group control"? Something like Group Policy in Active Directory? > > > > On 2/29/08, *Rich Megginson* <rmeggins@redhat.com > mailto:rmeggins@redhat.com> wrote: > > solarflow99 wrote: > > I was interested to create groups to use for authenticated access. > > Say for instance I configure samba to use FDS, can it actually use > > those groups to control permissions? What about the > gidnumber? This > > all the docs had to say about it: > > > > > > > > 5.4. Using Groups > > > > Groups are a mechanism for associating entries for ease of > > administration. This mechanism was provided with previous > versions of > > Directory Server and should be used primarily for compatibility with > > older versions of the server. > > > See http://tinyurl.com/3yo88r and http://tinyurl.com/2snfle and > http://tinyurl.com/337g46 for some examples using groups with ACIs. > > > > > > > > > ------------------------------------------------------------------------
> > > > -- > > Fedora-directory-users mailing list > > Fedora-directory-users@redhat.com > mailto:Fedora-directory-users@redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > mailto:Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > ------------------------------------------------------------------------
> > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
======================================================================================== AVISO LEGAL: Esta información es privada y confidencial y está dirigida únicamente a su destinatario. Si usted no es el destinatario original de este mensaje y por este medio pudo acceder a dicha información por favor elimine el mensaje. La distribución o copia de este mensaje está estrictamente prohibida. Esta comunicación es sólo para propósitos de información y no debe ser considerada como propuesta, aceptación ni como una declaración de voluntad oficial de NUCLEO S.A. La transmisión de e-mails no garantiza que el correo electrónico sea seguro o libre de error. Por consiguiente, no manifestamos que esta información sea completa o precisa. Toda información está sujeta a alterarse sin previo aviso.
This information is private and confidential and intended for the recipient only. If you are not the intended recipient of this message you are hereby notified that any review, dissemination, distribution or copying of this message is strictly prohibited. This communication is for information purposes only and shall not be regarded neither as a proposal, acceptance nor as a statement of will or official statement from NUCLEO S.A. . Email transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate and it should not be relied upon as such. All information is subject to change without notice.
do you use FDS with samba? I wonder what you did for the groups.
On Tue, Mar 4, 2008 at 9:10 PM, Ivan Ferreira iferreir@personal.com.py wrote:
Yes, groups works exactly as local groups.
In fact, you must ensure that your users belongs to the right group or you may have problems accessing samba shares.
Para "General discussion list for the Fedora Directory server solarflow99 project." <solarflow99@gmail.com> <fedora-directory-users@redhat.c Enviado por: om> fedora-directory-users-b cc ounces@redhat.com Asunto 04/03/2008 02:53 p.m. Re: [Fedora-directory-users] groups Clasificación Uso Interno Por favor, responda a "General discussion list for the Fedora Directory server project." <fedora-directory-users@ redhat.com>
not even that complex. Just a logical grouping like unix groups work. Do the groups in FDS work like that if I add users in them?
I think i've almost got it working with samba from the howto, but where to create the groups and map them I still don't understand.
On 3/4/08, Rich Megginson rmeggins@redhat.com wrote: solarflow99 wrote: > I don't see this actually doing group control, it looks more like > access control within the LDAP tree itself. What do you mean by "group control"? Something like Group Policy in Active Directory? > > > > On 2/29/08, *Rich Megginson* <rmeggins@redhat.com > mailto:rmeggins@redhat.com> wrote: > > solarflow99 wrote: > > I was interested to create groups to use for authenticated access. > > Say for instance I configure samba to use FDS, can it actually use > > those groups to control permissions? What about the > gidnumber? This > > all the docs had to say about it: > > > > > > > > 5.4. Using Groups > > > > Groups are a mechanism for associating entries for ease of > > administration. This mechanism was provided with previous > versions of > > Directory Server and should be used primarily for compatibility with > > older versions of the server. > > > See http://tinyurl.com/3yo88r and http://tinyurl.com/2snfle and > http://tinyurl.com/337g46 for some examples using groups with ACIs. > > > > > > > > >
> > > > -- > > Fedora-directory-users mailing list > > Fedora-directory-users@redhat.com > <mailto:Fedora-directory-users@redhat.com> > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > <mailto:Fedora-directory-users@redhat.com> > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > >
> > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > -- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
======================================================================================== AVISO LEGAL: Esta información es privada y confidencial y está dirigida únicamente a su destinatario. Si usted no es el destinatario original de este mensaje y por este medio pudo acceder a dicha información por favor elimine el mensaje. La distribución o copia de este mensaje está estrictamente prohibida. Esta comunicación es sólo para propósitos de información y no debe ser considerada como propuesta, aceptación ni como una declaración de voluntad oficial de NUCLEO S.A. La transmisión de e-mails no garantiza que el correo electrónico sea seguro o libre de error. Por consiguiente, no manifestamos que esta información sea completa o precisa. Toda información está sujeta a alterarse sin previo aviso.
This information is private and confidential and intended for the recipient only. If you are not the intended recipient of this message you are hereby notified that any review, dissemination, distribution or copying of this message is strictly prohibited. This communication is for information purposes only and shall not be regarded neither as a proposal, acceptance nor as a statement of will or official statement from NUCLEO S.A. . Email transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate and it should not be relied upon as such. All information is subject to change without notice.
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
389-users@lists.fedoraproject.org