I'm sending rebased patch by Pierre Ossman. The patch is adding an option to
allow/deny user access based on host attribute supported by pam_ldap.
I tested the patch and it works just fine. I also have no objections to the
design.
https://fedorahosted.org/sssd/ticket/746
--
Thank you
Jan Zeleny
Red Hat Software Engineer
Brno, Czech Republic