[COLUG] SSH AllowGroups / AllowUsers

[Brian Miller]

Scott Merrill wrote:
> I'm preparing a new NFS server running RHEL 5.1 which is connected to
> our Active Directory (LDAP / Kerberos) infrastructure.  This NFS
> server will share the /home partition that our various
> (to-be-installed) GNU/Linux lab machines will mount.
> 
Robert mentioned modifying the /etc/pam.d/system-auth, but you could 
also write a custom /etc/pam.d/sshd file that points to the correct pam 
modules to use with AD.

The error messages you are getting indicate that sshd does not know how 
to verify the user account and/or group that the config file refers to. 
  This is probably not so much an auth issue as an account issue.

Of course, using the /etc/security/access.conf mechanism is another way 
to resolve the issue.

Isn't Linux great?  There must be 5 different ways to solve your problem.