Re: LDAP Module only for Authorization and not for Authentication

[HRZ Konten <hrzkonten@uni-bonn.de>]

>> 1. Authorize Huntgroup-Name== xxx, Ldap-Group==xxx....
>> 2. Authenticate user + password through pam
>>
>> Can I do authorization with LDAP and then authenticate with pam?
>>     
>
>   Yes.  But I'm not sure what you mean by that.  If you check the LDAP
> group, what do want to do with the result?  Reject users NOT in an LDAP
> group?  Please explain.
>
>   

I want when requests are comming from the IP in the huntgroup, then to
be checked whether the user is in the LDAP-Group, when yes, then check
user/password with pam and send Accecc-Accept.
When the user isn't in the LDAP-Group, then should be rejected.