RSA ACE/Server - SecurID login from NAS

[mbilgrav]

Hi,

I have several NAS from which user can login via Tokencard and AC/Servers (SDI)
Now I want to be able to tell that a specific user only can login from a specific NAS, and not any other NAS.

How can this be done on win32 servers version 5.1.1 ?

Next logical question is: Is there any utils/tools that can help be do this for 1600+ users ?

 

[Dohnix]

The point of the Groups in an ACE/Server database is exactly what you want to achieve, i.e. don't leave all agent hosts (NAS) open to 'All users' but only allow each agent to authenticate a particular group, then put the relevant users into each group.

As far as the +1600 users, try using the LDAP connector, assuming that all your users have an LDAP/AD/NDS account internally.

HTH