I have a Linux host that runs on CentOS 7, joined to domain through realm.

My goal is to provide ReadOnly access to one of the AD groups say "LinuxRO-USR", the users of this group should only be able to sign on using their AD credentials and access their home directory along with other non-sudo commands.

I know adding the following to the sudoers file will also give Sudo access to the users of that group. %LinuxRO-USR@example.com ALL=(ALL) ALL.

Whereas, I want to restricate the access of LinuxRO-USR group such that if one of it's users tries to run any sudo command like sudo fdisk -l, he should not be provided with the output of it. How can I achieve this?

  • Don't I really have anyone who can answer my question!! – Srikanth Oct 22 '18 at 7:24

In order to have read only for AD members in Linux environment you will need LDAP. Check the below link and this article will help you:


  • AD is LDAP. Also try to avoid link-only answers as links may become inactive after some time – mrc02_kr Oct 23 '18 at 8:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.