Re: Fwd: dirsrv gosa to 389 questions on some capabilities

[Noriko Hosoi <nhosoi@xxxxxxxxxx>]

Hi Zynda,

1. The ability to restrict users to specific hosts, adding hosts list.

We have Access Control to restrict the IP address / hosts accessing the server from.

13.4.6. Defining Access from a Specific IP Address

https://access.redhat.com/site/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Managing_Access_Control-Bind_Rules.html#Bind_Rules-Defining_Access_from_a_Specific_IP_Address

13.4.7. Defining Access from a Specific Domain

https://access.redhat.com/site/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Managing_Access_Control-Bind_Rules.html#Bind_Rules-Defining_Access_from_a_Specific_Domain

2. The ability to restrict users to specific sudo commands.

This is beyond the 389-ds-base directory server, but our higher layer product FreeIPA (http://www.freeipa.org/page/Main_Page) has the ability.

http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/defining-sudorules.html

3. Tying in svn or git with changes.

Could you give us more details what you are looking for?

We have this git page, on which you could see the tags corresponding to the release.
https://git.fedorahosted.org/cgit/389/ds.git/

For instance, the latest el6: http://directory.fedoraproject.org/wiki/Releases/1.2.11.29
Tag: 389-ds-base-1.2.11.29 (https://git.fedorahosted.org/cgit/389/ds.git/tag/?id=389-ds-base-1.2.11.29)

Thanks,
--noriko

Zynda, Bradley V. (GSFC-423.0)[ADNET SYSTEMS INC] wrote:

Hi Noriko,

Would you happen to have any suggestions or ideas as to the (1-3) I have
listed below?

Would 1 and 2 be doable from the admin GUI?

Thank you for your time,
Brad


-------- Original Message --------
Subject:  dirsrv gosa to 389 questions on some capabilities
Date: Mon, 19 May 2014 16:51:46 +0000
From: Zynda, Bradley V. (GSFC-423.0)[ADNET SYSTEMS INC]
<bradley.v.zynda@xxxxxxxx>
Reply-To: General discussion list for the 389 Directory server project.
<389-users@xxxxxxxxxxxxxxxxxxxxxxx>
To: 389-users@xxxxxxxxxxxxxxxxxxxxxxx <389-users@xxxxxxxxxxxxxxxxxxxxxxx>

Hi All,

We are currently in the process of moving to a fresh Cent6.5 389
setup. The old setup was an improperly configured Gosa dirsrv and we
would like to get away from gosa on the new 389 build. Though I have
come across some needs that I can't seem to find documentation on:

1. The ability to restrict users to specific hosts, adding hosts list.

2. The ability to restrict users to specific sudo commands.

3. Tying in svn or git with changes.


Thanks,
Brad
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users