Sigur?ur Bjarnason wrote: > > Hi all > > I am new to Fedora Directory Server, I have manage to set it up all > right but I have one simple question as such.. J > > Before I will put a lot of effort into setting it up for my production > env I would like to know atleast one thing?. When I manage to connect > client > It depends - what is the client? If the client is an OS, Fedora DS uses the standard posix objectclasses and attributes. > > to the directory server will I be able to control the users access to > client thought the directory on file level? > > That is if for some reason I would not allow the user to access or > read certain files or folders on the client could that be controlled > in the Directory ? > You can't control this through the directory server unless the client can already model the file/folder relationships through the directory server. Usually clients don't do this unless you are using some sort of policy engine like SiteMinder, and even that won't work for OS file/folder permissions. That is normally used for web site URL access. Usually ldap+os integration means that you still set file/folder ownership and permissions using the familiar chown and chmod commands, but the actual uid/gid information is looked up in ldap rather than from /etc/passwd and /etc/groups. > > Regards > > Siggi > > ------------------------------------------------------------------------ > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20061129/9f11df92/attachment.bin
