Context : We have a Ubuntu 12.04 with authentication done on a ldap server.

Unfortunately, one (ldap) user belongs to a (ldap) group named "admin".

I know there is the option nss_initgroups_ignoreusers to list the users I don't want to be looked for from the ldap. But couldn't find any equivalent for groups.

How could I specify ldap groups not to be used on this installation?


The only way I'm aware of would be including a filter with your nss_base_group entry. Depending on what group structure you're using, you might need to replace cn with gid or something else. You might need to change the base and scope of the search as well depending on your system.

nss_base_group  ou=groups,dc=example,dc=com?one?(!(cn=admin))

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.