host-based authentication with ldap

[John Ross_1]

I am wanting to implement user authentication using LDAP for our HP-UX 11.X systems and need to know if you can limit access to specific machines based on attributes stored in each users record. It appears this can be done in Linux ("http://www.mandrakesecure.net/en/docs/ldap-auth.php" -- search for "Host-based Authentication"), and I was wondering if the same could be done in HP-UX 11.X. I have not been able to find this answer on my own, and was hoping that someone here might have figured this out.

Thanks.

[OneNeck UNIXSA]

Yes, It uses the same idea as netgroup.

Determined by this RFC.
ftp://ftp.isi.edu/in-notes/rfc2307.txt

[Bob Neal-Joslin]

LDAP-UX uses a "configuration profile", that follows the draft-joslin-config-profile-04.txt (www.ietf.org.) Using this profile, you can define search filters for the pam service if you're using PAM_LDAP for user authentication, which then limits which users are visible to pam, based on the attributes in the LDAP entry.

Bob