Login restrictions in NIS environment

Cecilio Marín cmarin at essiprojects.com
Wed Jun 8 11:36:25 UTC 2005


Well, the second method is a possible solution.

Services: DNS, HTTPD, NIS...

#/etc/hosts.allow
ypserv: ALL
httpd: ALL EXCEPT fred at ALL
bind: ALL EXCEPT fred at ALL
....
<daemon>: ALL EXCEPT fred at ALL

#/etc/hosts.deny
#Very restrictive
ALL: ALL at ALL, PARANOID

But the problem is if the daemons are not ready to use wrappers (this is 
defined on compilation time of daemons).

Slts.

Richard Hobbs escribió:

>Hello,
>
>Banning particular IP addresses is useless to us... We need to ban
>particular users.
>
>For example, if we ban fred's machine, fred can still log in from a
>different machine. We need to ban fred from every machine, but he still
>needs to be able to log into other machines on the network.
>
>Thanks again,
>Richard.
>
>  
>






More information about the redhat-list mailing list