LDAP host Access

[UnixSkunk]

Hi, guys....
I'm fairly new to LDAP.....AND Perl..And the first project I assigned myself was to write scripts using PERL to manage users in LDAP. I've managed to build the scripts to Add, and remove, and display all users.
The next step in my learning is to try and limit user access to certain hosts via LDAP. So far, I've failed miserably. Would anyone have any recommendations on how to go about doing this?
I would prefer to limit a group of users to one set of hosts, and a different group to a second set of hosts.

So...Basically, the question is...Is there a way to limit a group's access to certain hosts via LDAP?

Thank you!


UnixSkunk - Not everything is black and white.

 

[ITPangaeaArchitect]

It depends...is this MS Active Directory LDAP implementation or other ldap product?

You can limit it in windows, however, you can only restrict to 64 systems (I think it was 64 anyways)...nothing beyond that is supported by MS

I can't remember the attribute name off top of head, but it should be coming my way before too long here (buddy has it fresh in his head due to working on similar item a few weeks back)

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+

 

[ITPangaeaArchitect]

attribute in AD:

userWorkstations

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+

 

[UnixSkunk]

Sorry, its not Windows Active Directory. We're using a Centos/LDAP solution.

UnixSkunk - Not everything is black and white.