[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Access control by host and user //Re: time control for remote ssh/sftp access



On Wed, Dec 16, 2009 at 07:02:09PM +0100, RalfGesellensetter wrote:
Am Mittwoch, 16. Dezember 2009 schrieb Jonas Smedegaard:
Blocking access is best done using a firewall

Dear Jonas, thanks for your assessment regarding time control.

Now, what if I need to limit the (samba) access for (5 anonymous) accounts to a set of (5) hosts (IP addresses) that are located in a semi-public library and (currently) used by extern users with limited rights?

Apart from pam_list (how?) I could imagine that there is a way
- to limit NFS access and Unix login for those users as well as
- tell samba to block login based on hostname and username.

Just wondering if pam could be a real candidate here.

Be a candidate _where_? It seems to me that you are talking about multiple constraints at the same time.

Initially in this thread you talked about preserve bandwidth[1] by time-limiting access for regular users from outside to their regular accounts on a regular tjener.

Now you talk about restricting custom users with custom access to the network.

Do I misunderstand the scenario or are you deliberate shuffling between multiple scenarios because you seek a one-size-fits-all solution?


Kind regards,

 - Jonas

[1] I find it a wrong approach to preserve bandwidth that way, but that is outside the scope of your question.

--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

Attachment: signature.asc
Description: Digital signature


Reply to: