Hello everyone,
I have a terminal server with sssd-ldap setup, users authenticate to Active Directory. Now
I need to restrict users' access to AD server with LDAP from their terminal sessions.
My idea is to define one privileged source IP port which is used only by SSSD when
connecting to AD, and block connections originating from other ports.
Is it possible?
Does anyone have other ideas on similar problem?