utebehemoth
Programmer
I am trying to implement a solution for group based authentication on linux nodes based on the host name / ip of the machine using a global config file amongst all of the nodes. I intend on using LDAP for the authentication part (user name and password check) but as far as I have been able to determine, there isn't any way to restrict access to specific hosts in the directory itself. Therefore, I am trying to use a file on the local machine, using PAM to allow/deny access based on if the user's group is allowed to access the server.
A file that would look something like this:
#server1
server1 = (group1, group2);
#server2
server2 = (group1, group2);
The PAM module would be able to find the hostname of the machine in the file and then determine if the authenticating user is a member of an allowable group.
Any guidance on this issue would be greatly appreciated.
A file that would look something like this:
#server1
server1 = (group1, group2);
#server2
server2 = (group1, group2);
The PAM module would be able to find the hostname of the machine in the file and then determine if the authenticating user is a member of an allowable group.
Any guidance on this issue would be greatly appreciated.