Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top


We have user user1, user2, user3 and user4 in LDAP. And Linux machines linux1, linux2, linux3, linux4, ... linux50 is in this LDAP domain.

Now the problem is:

How to limit user1 to only have permission to logon linux1, linux2, linux3, and linux 4 only? The other users (user2, user3, user4) can logon to all of these machines (this is trivial, we already have it).

share|improve this question

migrated from Dec 21 '10 at 7:42

This question came from our site for computer enthusiasts and power users.

The simplest way would be to create two LDAP groups, e.g. "tester" and "developer", or whatever.

Then on linux2, linux3, and linux4, you would add

pam_groupdn "developers"

to /etc/ldap.conf.

See for more details.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.