Re: Using LDAP how to restrict users to certain applications only

To: openldap-technical@openldap.org

Subject: Re: Using LDAP how to restrict users to certain applications only

From: "Geo P.C." <pcgeopc@gmail.com>

Date: Tue, 7 May 2013 11:11:39 +0530

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:mime-version:in-reply-to:references:from:date:message-id :subject:to:content-type; bh=0EXrq4NQgfVeU6iUgMXYVFe0WT5EeiCweJqISp6mKEQ=; b=MMISdSLCpZ0uJ/ehkxLoa/3wI8LN0A4d0aJ7+G4sGx86nbREVvAPBJlv41etvklWw/ xqi6knr8XpsGiKy+5t4ZQj1uG/P/TiJ2kJQkkZwaksELCokkK4kvAdlWAo7g99WMtde4 t90YkcdfQou2lf/ytZcHKlM1X8sq5URKR1Us8BHLWGpsQnRPGpEi5sgBBjjSnF5TPMaP 305sPwkgmn+7hQBeuq1S1+jK/RS8eqwY8ZQuX/szf2f9EBboDfMW/C1zPLU9G88My+bd +xL/i7WQK7+Rs9XJcZjhPDqPpjPodWTgB6ih/u4ci++34lI3eBM3Ut3vWx9RUz2UxVCh 7Nqw==

In-reply-to: <CAKtc8vU+aMT4Q8Bc-_qyKDErGd8-q6NXJteDNrW0xKFaayJDjQ@mail.gmail.com>

References: <CAKtc8vU+aMT4Q8Bc-_qyKDErGd8-q6NXJteDNrW0xKFaayJDjQ@mail.gmail.com>

Please let me know is it possible to implement this idea?. Also please let me know your thoughts.

Thanks
Geo

Thanks & Regards
Geo P.C.
www.geopc.co.cc

On Mon, May 6, 2013 at 3:51 PM, Geo P.C. <pcgeopc@gmail.com> wrote:

Hi

We are using many applications like zabbix, phabricator, AC etc. We need to integrate LDAP in all these applications. These application support LDAP but not group based authentication.

Please let us know is there any option to restrict selected users to login. We created all users under ou ‘users’ .

On these application we need to login certain users only. How we can restrict it as we can’t able to restrict on application side

In these application they provide only “Base DN” and “Search Attribute” so we can’t able to give dn: ou=users,ou=system as it gives access to all users.

So is it possible to give Base DN as “cn=Zabbix,ou=groups,ou=system” and this group contains only user1 and user2. SO it will restrict users.

Please let us know how we can implement this scenario. Thanks in advance please help us to solve this issue.

Thanks
Geo