Hello All: I am in the process of migrating from OpenLDAP to Centos Directory Server. I'm very pleased with the new LDAP and think it's one of those killer apps that will guarantee Linux a place in data centers :D... So far I've gotten the main things working: 1) Host based access via AuthorizedHost 2) Service based access via AuthorizedService 3) AIX/Linux <-> LDAP 4) PosixGroup support The one thing I would like is to have group based host access control. E.g., I would like to define a new LDAP group (say, DBA-Production) that includes a bunch of host entries. When needed, I could add a user to the DBA-Production group and automatically give him/her access to the list of defined hosts. Anyone have suggestions on how to approach this? Thanks, Kwan -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20080915/b8943aff/attachment-0004.html>