samba - Jan 2003 - LDAP workstation field

My client wants me to prevent limit the workstations users can access. I
have samba with roaming profiles in place, and it works well, and I have
put LDAP into use on another project without problems.
I notice there is a workstation field in the Samba LDAP database, does
anyone know if it works to limit access to certain workstations?

Chris Mason

On Mon, Jan 06, 2003 at 09:28:21PM -0400, Chris Mason
wrote:
> My client wants me to prevent limit the workstations users can access. I
> have samba with roaming profiles in place, and it works well, and I have
> put LDAP into use on another project without problems.
> I notice there is a workstation field in the Samba LDAP database, does
> anyone know if it works to limit access to certain workstations?
In Samba 3.0 this is exactly what this does.  Users can only log onto 
workstations in that list.

Furthremore, samba does not allow any connections except as per that list. (but
this could be faked, so it's not much of a security thing)

Andrew Bartlett

There is such a mechanizm discussed in 
http://www.mandrakesecure.net/en/docs/ldap-auth.php

Chris Mason wrote:
> My client wants me to prevent limit the workstations users can access. I
> have samba with roaming profiles in place, and it works well, and I have
> put LDAP into use on another project without problems.
> I notice there is a workstation field in the Samba LDAP database, does
> anyone know if it works to limit access to certain workstations?
> 
> Chris Mason
>