>Not exactly, as I recall correctly. However, you might check into the >pam_groupdn and/or pam_filter configuration directives, they might do >something like what you want. We use pam_listfiel to accomplish this. On each host is a simple file of groups permitted to use the server.