On Wednesday, 1 August 2012 22:21:07 Qian Zhang wrote:

> BTW, I do not know how to configure PAM to only allow a group or some

> groups to login the machine, if anyone can tell me the steps, it will

> be really appreciated!

This isn't specific to LDAP or any other nss plugin, but specific to PAM. You may want to look at the pam_listfile or pam_succeedif plugins, which should both be able to do this for any group (local, LDAP, other nss plugin).

Regards,

Buchan