I have a scenario where I want to setup two LDAP groups where one group can access a file on the server while the other one cannot after they login.  Can some PAM tweaks make this happen if not on the ldap side?<br>