[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: View or filter based on ldaps://FQDN



Ronie Gilberto Henrich wrote:
Is it possible to allow access to a specific dn only by a specific client IP address?
ie:
access to dn.exact="ou=domain,ou=raincoatcompany.com"
     by clientIP=200.200.0.117 read

See the man page slapd.access(5), especially

peername[.<peernamestyle>]=<peername>.

More ideas for access control here (not for IP-based authentication though):

http://www.openldap.org/faq/data/cache/189.html

Ciao, Michael.