[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: What will happen if a user is a member of a group, but has another group as its primary group

To: openldap-technical@openldap.org
Subject: Re: What will happen if a user is a member of a group, but has another group as its primary group
From: Buchan Milne <bgmilne@staff.telkomsa.net>
Date: Fri, 03 Aug 2012 11:13:19 +0200
Cc: Qian Zhang <zhq527725@gmail.com>
In-reply-to: <CABY6VOYuXtHbZEBEiH2hLNT3WaGqOuOmiGgfV4rnFHr+dr0wsg@mail.gmail.com>
References: <CABY6VOYuXtHbZEBEiH2hLNT3WaGqOuOmiGgfV4rnFHr+dr0wsg@mail.gmail.com>
User-agent: KMail/4.8.2 (Linux/3.3.6-server-2.mga2; KDE/4.8.2; x86_64; ; )

On Wednesday, 1 August 2012 22:21:07 Qian Zhang wrote:

> BTW, I do not know how to configure PAM to only allow a group or some

> groups to login the machine, if anyone can tell me the steps, it will

> be really appreciated!

This isn't specific to LDAP or any other nss plugin, but specific to PAM. You may want to look at the pam_listfile or pam_succeedif plugins, which should both be able to do this for any group (local, LDAP, other nss plugin).

Regards,

Buchan

References:
- What will happen if a user is a member of a group, but has another group as its primary group
  - From: Qian Zhang <zhq527725@gmail.com>

Prev by Date: Re: Trying make a replication
Next by Date: Troubles with LDAP SYNC and doubt
Index(es):
- Chronological
- Thread