I am currently using sssd.conf to only allow login for ldap users that are in a specific group.
I would like to do the opposite and DENY login based on group membership of a user, while allowing all other users that are NOT members of said group to login.
Is this possible? My current config that ALLOWS based on group looks like this
access provider = ldap ldap_access_filter = (|(location=secure)(location=sysadm))
I would like to basically do something like below (location not equal to)
ldap_access_filter != (|(location=secure)(location=sysadm))