[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: What will happen if a user is a member of a group, but has another group as its primary group

To: openldap-technical@openldap.org
Subject: Re: What will happen if a user is a member of a group, but has another group as its primary group
From: Guillaume Rousse <guillomovitch@gmail.com>
Date: Wed, 01 Aug 2012 16:43:44 +0200
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=XmNEQnH47XbvYqpZupxs3Xnfl+2Uxpnv0hYQwX2e0aE=; b=m5ACwL5bpmEQsmFevphRdLGLbRtapjiWyCWvKdtWxOz1Ic6GGg+GCA4NKtyNYafyX4 s8+ULIJy25UL+dlS0a2Aadx//rqBe1PiohB08wc4DydbU9d2D/rjXDiumy7kT/4b4565 PTvQhXtOF0lK/Q2fVgAhWRG0DtGIt1kllUmHviWhbJFVBQBnJFNLku6NKxynlGTD2VH0 0UjV/TdyeafZ6dtXj/NtXde0h5SPE3azcr3O9z+hYYE+MEklugC9DdrThdnPuEwWeUaV Zo79AZOpMwA+IZq5dUZNJWXj0msXjMfC8b8REK2uHZzH1KObVRgPmghCUkM/BCMjFkTK jCYA==
In-reply-to: <CABY6VOYuXtHbZEBEiH2hLNT3WaGqOuOmiGgfV4rnFHr+dr0wsg@mail.gmail.com>
References: <CABY6VOYuXtHbZEBEiH2hLNT3WaGqOuOmiGgfV4rnFHr+dr0wsg@mail.gmail.com>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:14.0) Gecko/20120718 Thunderbird/14.0

Le 01/08/2012 16:21, Qian Zhang a écrit :

Hi,

In my OpenLDAP server, it is possible to set a user as a member of a
group, but it has another group as its primary group (I am using "LDAP
Admin" as LDAP client tool). For example, in group1, I can see user1
as its "memberUid" attribute, but the "gidNumber" attribute of user1
is group2.

I'd like to know if this is a reasonable configuration, and in this
case, should I consider user1 as the member of group2 too? For
example, if I configure a machine to only allow gruop2 to login, can
user1 log into that machine?

BTW, I do not know how to configure PAM to only allow a group or some
groups to login the machine, if anyone can tell me the steps, it will
be really appreciated!

Actually, those kind of question are not specific to openldap, nor toany other ldap implementation. You'll probably have better answers ondedicated mailing list, such as nss_ldap user list for instance.

Also, you can get the answer to your questions quite easily by editingdirectly good old /etc/{passwd,group} plain text files, and getent/idcommands.

--
BOFH excuse #217:

The MGs ran out of gas.

References:
- What will happen if a user is a member of a group, but has another group as its primary group
  - From: Qian Zhang <zhq527725@gmail.com>

Prev by Date: What will happen if a user is a member of a group, but has another group as its primary group
Next by Date: Re: What will happen if a user is a member of a group, but has another group as its primary group
Index(es):
- Chronological
- Thread