AFP and LDAP Authenication help

[pbw]

All right! Here is my deal. Got a Mac OS X 10.4.3 server that I want to control certain shares using accounts from an LDAP server, but I do not want them to be able to log into a terminal session at the server. Can anyone point me in the direction of how to make this happen?

Thanks!

[mkalien]

1. If you don’t want them to have shell access at all, then change their default user shell for each user on the ldap server.
— or —
2. If you want the users to have some shell access but just not on the file server, use Server Admin to specify the service access for SSH on the file server. Obviously this will keep the users from using SFTP, but since you titled the post AFP and LDAP I’m hoping you weren’t counting on SFTP access and no shell access. You can do that, but not without some extra work.

[Author]

Posts