The idea is to receive the logs on the Rsyslog server and then send them to a specific Kafka server depending on the log contents.
For example, Logs are being received on a single port, 514 Forwarding received logs to Kafka topic #1 and lines containing "[warning]" to Kafka topic #2
Is anything like this at all possible?
Is it possible to setup Tacacs+ for a group to have different levels of access on a different devices?
So for example a group would have:
on routers 1-5 lvl-15
on routers 7-15 lvl-10
I am trying to limit LDAP logins to the "admin" group.
This is my /etc/sssd/sssd.conf file:
[domain/default]
autofs_provider = ldap
ldap_tls_reqcert = allow
auth_provider = ldap
ldap_id_use_start_tls = False
chpass_provider = ldap
cache_credentials = True
debug_timestamps = True
ldap_default_authtok_type = password
ldap_search_base = dc=example,dc=com
id_provider = ldap
ldap_default_bind_dn = cn=moderator,ou=moderators,ou=test,o=organization,dc=example,DC=COM
min_id = 100
ldap_uri = ldaps://example.com:636/
ldap_default_authtok = Pa$$word
ldap_tls_cacertdir = /etc/openldap/cacerts/
ldap_tls_cert = /etc/openldap/cacerts/certificate.pem
access_provider = ldap
ldap_access_filter = memberOf=cn=admin,ou=group,o=organization,dc=example,dc=com
[sssd]
services = nss, pam, autofs
domains = default
[nss]
homedir_substring = /home
[pam]
[sudo]
[autofs]
[ssh]
[pac]
[ifp]
[secrets]
[session_recording]
I have tried to do id username and it comes up with:
id user uid=90514(user) gid=20000(users) groups=20000(users),2480(admin)
When trying to change the user by doing su user it gives error su: Permission denied after the passord is entered.
When removing group limitation entries from sssd.conf, it works as expected and lets the user to login.
Any ideas where I have messed up?
Edit: For now I will set it up with /etc/security and PAM and that works. However I am still curious about doing it with sssd.