[1701] in athena10
Re: nss: hesiod -> ldap for groups?
daemon@ATHENA.MIT.EDU (Anders Kaseorg)
Sun Mar 15 17:42:12 2009
Date: Sun, 15 Mar 2009 17:41:16 -0400 (EDT)
From: Anders Kaseorg <andersk@MIT.EDU>
To: Mitchell E Berger <mitchb@mit.edu>
cc: Geoffrey Thomas <geofft@mit.edu>, Jacob Morzinski <morzinski@mit.edu>,
athena10@mit.edu
In-Reply-To: <200903152135.n2FLZVL4023980@byte-me.mit.edu>
Message-ID: <alpine.DEB.2.00.0903151738270.15595@vinegar-pot.mit.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=UTF-8
Content-Transfer-Encoding: 8bit
On Sun, 15 Mar 2009, Mitchell E Berger wrote:
> if I do what we did on the Athena 9 implementation of this server
> (create a local group and enumerate the users in /etc/group{.local})
> nss-nonlocal will punt the users from the group when they log in with
> their Athena account.
No it won’t. That should work just fine.
nss_nonlocal prevents nonlocal users from gaining local credentials for
nonlocal reasons. /etc/group is a local reason, so it is allowed.
Anders
