Active Directory authentication working but not as expected.

stevecous · 06-25-2013, 04:19 AM

Please excuss my lack of knowledge, I am a very average Linux user.

I have configured a Redhat linux server with winbind, I have set the require_membership_of in /etc/pam.d/system-auth as below but I am able log onto the server using any AD accounts regardless of group membership.

The line I have is, I have also tried without the domainname.

auth sufficient pam_winbind.so debug use_first_pass require_membership_of=domainname\\groupnema

Have I done something wrong or missed something somewhere?

Thanks

stevecous · 06-26-2013, 05:29 AM

I worked it out. I needed to set the group in /etc/security/pam.winbind.conf