On Wednesday, 1 August 2012 22:21:07 Qian Zhang wrote:
> BTW, I do not know how to configure PAM to only allow a group or some
> groups to login the machine, if anyone can tell me the steps, it will
> be really appreciated!
This isn't specific to LDAP or any other nss plugin, but specific to PAM. You may want to look at the pam_listfile or pam_succeedif plugins, which should both be able to do this for any group (local, LDAP, other nss plugin).