libnss-ldap, pam_groupdn

2019-08-13 Thread julian
Hi! I have a Debian 10 system that uses libnss-ldap to authenticate against an LDAP server. This is working very well. Now I’m trying to restrict the access with the pam_groupdn directive in /etc/libnss-ldap.conf. But this is not working. Everyone can login, the LDAP group is not checked (seen

Re: libnss-ldap, pam_groupdn

2019-08-13 Thread Sven Hartge
jul...@kotysch.de wrote: > I have a Debian 10 system that uses libnss-ldap to authenticate against > an LDAP server. This is working very well. To confirm: You are using "libnss-ldap" and *not* "libnss-ldapd", correct? If yes, then could you please try "libnss-ldapd"? It is a (in my opinion) mu