ldap-ux client access control using AD

[Jean He]

I'm trying to use Active Directory as the directory data
repository for two HP-UX servers. (eventually, there will
be more servers)

After I create a new user in Active Directory, and set
it's UNIX Attributes, I have no problem logging the user
into both of the unix boxes. However, I want the new user
to have access to ONLY the first unix box, and I'm not
sure what I can do to control this.

Any help would be much appreciated!
Jean

 

[Joe Richards [MVP]]

For ldap authentication you can't control it unless you set up a ip security policy to block incoming traffic from UNIX
box 2 which means it can't talk to the domain at all.