We have limited 'su' to users that are in the wheel group and are now looking to permit certain users that are in a particular AD-Group.
The users that we want to permit to use the program 'su' are in the AD-Group: "firstname.lastname@example.org".
We are utilizing the following configuration in /etc/pam.d/su:
auth required pam_wheel.so use_uid
How do we achieve so that every user that is a member of AD-group "email@example.com" can use the program 'su'?