Restrict users to certain machines

[Sam Hartman]

>>>>> "McClain," == McClain, Luke <luke.mcclain at upbna.com> writes:

    McClain,> Is there a way restrict users from accessing certain
    McClain,> machines with their krb account.  Before we implemented
    McClain,> kerberos, the netgroups I set up with NIS were working
    McClain,> fine for this purpose. It seems like kerberos completely
    McClain,> ignores my netgoups now because users restricted before
    McClain,> via netgroups, now are able to login with their kerberos
    McClain,> account. Has anyone run into similar problems? what was
    McClain,> your fix.


You can do this either at the NSS level or the PAM level; neither of
these is Kerberos specific.

If you are on an OS without PAM, you will have to add functionality to
whatever login binary you use.