I accomplish this with the pam_access module and an appropriate access.conf 
file on my Red Hat flavored machines. 

http://linux.die.net/man/8/pam_access 

http://linux.die.net/man/5/access.conf 

----- Original Message -----

> From: "Enrico Morelli" <more...@cerm.unifi.it>
> To: "General discussion list for the 389 Directory server project."
> <389-users@lists.fedoraproject.org>
> Sent: Wednesday, April 27, 2016 8:21:00 AM
> Subject: [389-users] Login restrictions

> Is it possible to restrict login only to to whom bound to a
> determinated group?

> I tried to use the following lines in sssd.conf but doesn't works:

> access_provider = ldap
> ldap_access_order = filter
> ldap_access_filter = (gidNumber=900)

> --
> -------------------------------------------------------------
> Enrico Morelli
> System Administrator | Programmer | Web Developer

> CERM - Polo Scientifico
> Via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
> phone: +39 055 457 4269
> fax: +39 055 457 4927
> -------------------------------------------------------------
> --
> 389-users mailing list
> 389-users@lists.fedoraproject.org
> http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org

-- 
        

        

Patrick Landry 
Director, UCSS 
University of Louisiana at Lafayette 
p...@louisiana.edu 
--
389-users mailing list
389-users@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org

Reply via email to