[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Restricting access to certain DNs based on IP address?

To: OpenLDAP Software List <openldap-software@OpenLDAP.org>
Subject: Re: Restricting access to certain DNs based on IP address?
From: Dave Horsfall <daveh@ci.com.au>
Date: Tue, 21 Dec 2004 10:22:25 +1100 (EST)
Archive: No
In-reply-to: <41C68DB2.2040908@JustThe.net>
References: <41C68DB2.2040908@JustThe.net>

On Mon, 20 Dec 2004, Steve Sobol wrote:

> Is it possible to restrict access to specific DNs based on IP address, for
> example "ou=public,dc=company,dc=com" is left open to everyone but
> "ou=private,dc=company,dc=com" is only accessible to people visiting from
> 192.168.2.0/24?

Hi Steve :-)

I haven't tried it, but this would seem to do it:

    access to dn.subtree="ou=private,dc=company,dc=com"
	by peername.ip=192.168.2.0%255.255.255.0 read/write/etc

-- 
Dave Horsfall  DTM  VK2KFU  daveh@ci.com.au  Ph: +61 2 8425-5508 (d) -5500 (sw)
Corinthian Engineering, Level 1, 401 Pacific Hwy, Artarmon, NSW 2064, Australia

Follow-Ups:
- Re: Restricting access to certain DNs based on IP address?
  - From: Hallvard B Furuseth <h.b.furuseth@usit.uio.no>

References:
- Restricting access to certain DNs based on IP address?
  - From: Steve Sobol <sjsobol@JustThe.net>

Prev by Date: Lock table is out of available object errors
Next by Date: Re: Restricting access to certain DNs based on IP address?
Index(es):
- Chronological
- Thread