Home / server / Questions / 504366
In Process
Geo
Asked: 2013-05-03 00:39:14 +0800 CST

How to configure ubuntu server with LDAP group based authentication

  • 772

By installing libnss-ldap we are able to integrate an Ubuntu server with ldap (openldap). But we are unable to configure ldap group based authentication.

We need to configure in such a way that user from a particular group need only to login.

Please let me know is it possible configure it and please update us the steps or any url.

Thanks

Geo

ubuntu-12.04

2 Answers

  1. You can configure detailed access rules in /etc/security/access.conf - read the file, it tells you what you need.

    Note however that this only works if your group mappings are correct from LDAP. To check if this is the case, use getent group.

    • 1

  2. The same question I found in stackoverflow, and it is work for me.

    The following setting are snippets from stackoverflow post.

    1. vim /etc/pam.d/sshd 
      account  required     pam_access.so
    2. vim /etc/security/access.conf 
      +:root:ALL
+:localuser:ALL
+:mygroup:ALL
-:ALL:ALL
    • 0