xguest LDAP authentication

xguest LDAP authentication

[Hal]

Hi all,
I have a selinux question concerning xguest and ldap user authentication. 
I want to achieve two goals:

1. All the users are authenticated by LDAP (I have several machines that share
the same users and same user home dirs on the common storage.) and I want to
convert most of the users to Selinux xguest users.

2. I want all the new users created in the LDAP to be assumed as xguest users
on all machines by default. 

How can this be done?
I am running Fedora 8. 

Regrards
Hal


      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: xguest LDAP authentication

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hal wrote:
> Hi all,
> I have a selinux question concerning xguest and ldap user authentication. 
> I want to achieve two goals:
> 
> 1. All the users are authenticated by LDAP (I have several machines that share
> the same users and same user home dirs on the common storage.) and I want to
> convert most of the users to Selinux xguest users.
> 
> 2. I want all the new users created in the LDAP to be assumed as xguest users
> on all machines by default. 
> 
> How can this be done?
> I am running Fedora 8. 
> 
> Regrards
> Hal
> 
> 
>       ____________________________________________________________________________________
> Looking for last minute shopping deals?  
> Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping
> 
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
Right now we do not have a distributed way of handling this.


semanage login -m -s xguest_u __default__

Will change the default users on a machine to xguest.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAke5k7AACgkQrlYvE4MpobNdTgCgtmUiFumgSzDTJ69XE0li+Co8
QncAnjK3eIfVKJaS02NYNmPSy7A13Imv
=HTou
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.