On 7/19/06, Cleber P. de Souza <cleberps@gmail.com> wrote:

Hi list.

Maybe this could be off-topic but here I think many have used OpenLDAP
to unify yours authentication needs, allowing an unique username and
password for all the corporate applications.
My doubt is, which rules do you use to split all the user levels so
that one user could be allowed to access app A but isn't allowed to
access app B (think this about many apps)?
Have you been using OU's to split user by app and copying them to each
app that them must access? Using posix groups and filtering users by
filters on each app?

As I see it, you should be creating as many OU's as user categories -roughly one per app. Smack each user into as many OUs as needed, then filter on OUs AND on POSIX groups as you see fit.

Thanks by the help.

--
Cleber P. de Souza
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos