<div dir="ltr">please anyone share bit more information on this like real example </div><div class="gmail_extra"> <div class="gmail_quote">On Tue, Mar 24, 2015 at 9:03 PM, Rob Crittenden <<a href="mailto:rcritten@redhat.com" target="_blank">rcritten@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Dmitri Pal wrote: > On 03/24/2015 01:15 PM, Ben .T.George wrote: >> Hi >> >> current stage is AD users can able to login to solaris box. But i >> don't up to what level i can control the user. >> >> i don't think to there is much pan modules in solaris. still i cannot >> able to make home directory with pam. > > I think pam_groupdn (if available on Solaris) might help but I could not > find a clear example to share with you here. I'd suggest looking at pam_access. rob > >> >> >> >> On Tue, Mar 24, 2015 at 4:42 PM, Dmitri Pal <<a href="mailto:dpal@redhat.com">dpal@redhat.com</a> <div class="HOEnZb"><div class="h5">>> <mailto:<a href="mailto:dpal@redhat.com">dpal@redhat.com</a>>> wrote: >> >> On 03/24/2015 07:20 AM, Ben .T.George wrote: >>> HI >>> >>> i am using IPA 3.3 and my client is solaris 10. >>> >>> how can i give only some set of users to this client without >>> creating user group in ad? >>> >>> thanks & Regards, >>> Ben >>> >>> >> >> You can create a group in IPA and make Solaris check that group at >> the access phase of PAM if Solaris is capable of checking groups >> this way. >> >> -- >> Thank you, >> Dmitri Pal >> >> Sr. Engineering Manager IdM portfolio >> Red Hat, Inc. >> >> >> -- >> Manage your subscription for the Freeipa-users mailing list: >> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> >> Go to <a href="http://freeipa.org" target="_blank">http://freeipa.org</a> for more info on the project >> >> > > > -- > Thank you, > Dmitri Pal > > Sr. Engineering Manager IdM portfolio > Red Hat, Inc. > > > </div></div></blockquote></div> </div>