We are using SSSD for authentication using LDAP. And I filter the user access using simple_allow_groups as follows:

access_provider = simple
simple_allow_groups = Computer Admins

(Note: Computer Admins is a LDAP group)

Is it possible to get a list of ONLY allowed users using getent or something else??

There is an option enumeration, but this lists all users from LDAP. I am only interested in the allowed users.

  • Authenticaton for what? Secure Shell? If so, add the relevant groups to /etc/ssh/sssd_config's AllowGroups directive once you have PAM enabled and configured. – DopeGhoti May 23 '17 at 22:03
  • I want get a listing of the users that are allowed by "simple_allow_groups" for e.g. – Saqib Ali May 23 '17 at 22:07
  • Good question. Did you ever find an answer? – jrw32982 Mar 6 at 19:10
  • Nope. I don’t think it is possible 😕 – Saqib Ali Mar 6 at 19:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.