[SSSD-users] Re: Use local posix group with ad-users to allow login access
On Thu, Jun 13, 2019 at 11:36:53AM -0000, Mads Boye wrote:
Hi everyone.
So I am banging my head against the wall and need some help.
What i try to achive is having a local posix group, which contains active directory
users.
Now i would like to use this posix group to allow the users to access the server with
e.g. ssh. How do I setup this?
Normally I use the allow_simple_groups for my AD user group who can login, but hte
documentation says that local groups are not evaluated.
I have tried with /etc/security/access.conf
The OS I am using is Ubuntu 18.04
If you care only about sshd, then AllowGroups in sshd_config might be a
good option.
Otherwise pam_access and access.conf.. What did not work with
access.conf? Did you also make sure that pam_access is present in the
PAM stack?
>
> Is what I am trying to achive possible with sssd?
>
> Please let me know if additional information is needed.
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...