rduran
Hi everyone,
First of all thanks for this software. I've been using it for some time with a basic configuration with no issues. Now I'm organizing the users and groups, and I have some doubts, but I couldn't find the answers in the documentation or in this forum.
So, I've created a user, and it belongs to group1. Group1 has access to group2.
As for access lists:
- User can access to server1.
- Group1 can access to server2.
- Group2 can access to server3.
All in all, the user should be able to access server1, server2 and server3, but it doesn't access to server3.
The confdba -us shows
"user": {
"access_to.0": "+ROUTE:192.168.1.12/32",
"conn_group": "group1",
"type": "user_compile"
}
"group1": {
"access_to.0": "+SUBNET:192.168.1.19/32",
"access_to.1": "+GROUP:group2",
"c2s_dest_s": "false",
"c2s_dest_v": "false",
"group_declare": "true",
"prop_autologin": "false",
"prop_deny": "false",
"prop_superuser": "false",
"type": "group"
},
"group2": {
"access_to.0": "+SUBNET:192.168.1.15/32",
"c2s_dest_s": "false",
"c2s_dest_v": "false",
"group_declare": "true",
"prop_autologin": "false",
"prop_deny": "false",
"prop_superuser": "false",
"type": "group"
},
So it seems it is configured ok. What am I missing? I'm trying to find the problem but I can't find anything wrong. I'd appreciate if someone could help me.
Kind regards,
rduran
Hi novaflash,
I was totally wrong then. I was thinking about creating groups of resources.
Thank you for explaining it so clearly.
Kind regards,
