Hi, with NIS the "compat" Mode in /etc/nsswitch.conf was available. So you could exclude user/group from login to the host. I read this mechanism is not possible with winbind. Is there any solution to solve this issue ? Bye, Andy
Gerald (Jerry) Carter
2008-Aug-27 14:33 UTC
[Samba] Howto control ssh logins with winbind ?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Andreas Ladanyi wrote:> Hi, > > with NIS the "compat" Mode in /etc/nsswitch.conf was > available. So you could exclude user/group from login to > the host. I read this mechanism is not possible > with winbind.If you are using pam_winbind, look at the require-membership-of PAM config option. cheers, jerry - -- ====================================================================Samba ------- http://www.samba.org Likewise Software --------- http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFItWW7IR7qMdg1EfYRArzvAKCcLvmmhbvJdJInM4KekRb0QrYz/wCeMRpj 5TODQaVEu2bIYUOqsQyTpHc=2eAv -----END PGP SIGNATURE-----
> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Andreas Ladanyi wrote: >> Hi, >> >> with NIS the "compat" Mode in /etc/nsswitch.conf was >> available. So you could exclude user/group from login to >> the host. I read this mechanism is not possible >> with winbind. > > If you are using pam_winbind, look at the > require-membership-of PAM config option. >Hi jerry, thats perfect ! Thanks a lot, Andy> > > > > > cheers, jerry > - -- > ====================================================================> Samba ------- http://www.samba.org > Likewise Software --------- http://www.likewisesoftware.com > "What man is a man who does not make the world better?" --Balian > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.6 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQFItWW7IR7qMdg1EfYRArzvAKCcLvmmhbvJdJInM4KekRb0QrYz/wCeMRpj > 5TODQaVEu2bIYUOqsQyTpHc> =2eAv > -----END PGP SIGNATURE-----