Setting up LDAP Login was easy enough for me using the following...

yum -y install openldap-clients nss-pam-ldapd git
Basic Configuration

authconfig --enableldap \
--enableldapauth \
--ldapserver={ldap.domain.com,} \
--ldapbasedn="dc=domain,dc=com" \
--enablemkhomedir \

But I can't get LDAP group restrictions to work, which is kinda paramount, I don't want the entire company getting access, just like 5 people. Im using CentOS 7 fully updated.


In the sssd.conf, under the correct domain, add the ldap_access_filter. e.g.

access_provider = ldap
ldap_access_filter = memberOf=cn=Group Name,ou=Groups,dc=example,dc=com
  • I'm not using SSSD, but I will give it another shot, I had trouble with SSSD, but the above worked and was extremely easy to setup. – FreeSoftwareServers Dec 27 '16 at 14:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.