On Fri, Sep 26, 2014 at 04:26:48PM -0600, Kevin Fenzi wrote: > * Some other clever solution. Use pam_exec, check cla membership in the auth phase (after authentication). -- Matthew Miller <mattdm at fedoraproject.org> Fedora Project Leader