I think there was something called ldap-sudo, but there might be other ways to do it.

On Oct 21, 2016 4:39 PM, "Bernard Fay" bernard.fay@gmail.com wrote:

Hi,

I would like to able to disable some Linux commands for LDAP users. One of those commands is passwd. Because of some specific needs, when the LDAP users have to change their password a special script has been created for this purpose. They MUST not use passwd but this command is still required by local users.

Does one of you might have an idea to disable Linux commands for LDAP users only?

Thanks, Bernard