topic Re: host-based authentication with ldap in Operating System - HP-UX

host-based authentication with ldap

John Ross_1 — Fri, 30 Aug 2002 13:52:53 GMT

I am wanting to implement user authentication using LDAP for our HP-UX 11.X systems and need to know if you can limit access to specific machines based on attributes stored in each users record. It appears this can be done in Linux ("http://www.mandrakesecure.net/en/docs/ldap-auth.php" -- search for "Host-based Authentication"), and I was wondering if the same could be done in HP-UX 11.X. I have not been able to find this answer on my own, and was hoping that someone here might have figured this out.

Thanks.

Re: host-based authentication with ldap

OneNeck UNIXSA — Fri, 30 Aug 2002 20:59:41 GMT

Yes, It uses the same idea as netgroup.

Determined by this RFC.
ftp://ftp.isi.edu/in-notes/rfc2307.txt

Re: host-based authentication with ldap

Bob Neal-Joslin — Wed, 11 Sep 2002 19:34:29 GMT

LDAP-UX uses a "configuration profile", that follows the draft-joslin-config-profile-04.txt (www.ietf.org.) Using this profile, you can define search filters for the pam service if you're using PAM_LDAP for user authentication, which then limits which users are visible to pam, based on the attributes in the LDAP entry.

Bob