Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

Context : We have a Ubuntu 12.04 with authentication done on a ldap server.

Unfortunately, one (ldap) user belongs to a (ldap) group named "admin".

I know there is the option nss_initgroups_ignoreusers to list the users I don't want to be looked for from the ldap. But couldn't find any equivalent for groups.

How could I specify ldap groups not to be used on this installation?

share|improve this question
add comment

1 Answer

The only way I'm aware of would be including a filter with your nss_base_group entry. Depending on what group structure you're using, you might need to replace cn with gid or something else. You might need to change the base and scope of the search as well depending on your system.

nss_base_group  ou=groups,dc=example,dc=com?one?(!(cn=admin))
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.