Linux client to authenticate against Active directory using LDAP
 

Hi there everyone,

I have currently setup my RHEL box to authenticate against Active directory using LDAP following the below link.

http://www.opensourcehowto.org/how-t...pam--ldap.html

Now what I want to do is only allow users added into a certain windows security group to be able to login, can you tell me how to do that?

I'm not sure how to do it from the LInux end (maybe modifying PAM modules?), but on the Windows end, you can specify which computers AD users can log in from.

Unfortunately this method wont work, when you specify which computers AD users can log in to in Active directory this works by applying group policy to the machine, this of course wont work because we are deal with a linux machine.

I think I need something along the lines of being able to point to a certain group and allow only people in that group to be able to login.