Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Context : We have a Ubuntu 12.04 with authentication done on a ldap server.

Unfortunately, one (ldap) user belongs to a (ldap) group named "admin".

I know there is the option nss_initgroups_ignoreusers to list the users I don't want to be looked for from the ldap. But couldn't find any equivalent for groups.

How could I specify ldap groups not to be used on this installation?

share|improve this question

The only way I'm aware of would be including a filter with your nss_base_group entry. Depending on what group structure you're using, you might need to replace cn with gid or something else. You might need to change the base and scope of the search as well depending on your system.

nss_base_group  ou=groups,dc=example,dc=com?one?(!(cn=admin))
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.