By installing libnss-ldap we are able to integrate an Ubuntu server with ldap (openldap). But we are unable to configure ldap group based authentication.

We need to configure in such a way that user from a particular group need only to login.

Please let me know is it possible configure it and please update us the steps or any url.




You can configure detailed access rules in /etc/security/access.conf - read the file, it tells you what you need.

Note however that this only works if your group mappings are correct from LDAP. To check if this is the case, use getent group.

  • Its working fine...In addtion to that done th folloing:Edit /etc/pam.d/sshd and uncomment account required pam_access.so – Geo May 2 '13 at 9:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.