Hot answers tagged

2

You should use SSSD and configure it to use LDAP instead of working with PAM directly. Then you can use the following in the SSSD domain configuration: access_provider = simple simple_allow_groups = groupname which is a very basic way to limit users, but you could also use access_provider=ldap and then use much more advanced LDAP queries to control ...


1

As you're configuring sudo, it's quite natural that it only affects what you can do with sudo. I see no reason why it shouldn't be possible to make pam use sudo. If it's only a static set of devices, you can define them in /etc/fstab, if you just add the user option, any user can mount them. If you really want users to be able to mount anything (but ...


1

Finally it turned out that nfs was responsible. Client was v.4, while server v.3 and therefore, mount option sec=sys was necessary at the client part. Thanks to all who bothered.



Only top voted, non community-wiki answers of a minimum length are eligible