<html><body><div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;">Hi all,</div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;"><br></div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;">I have the following lines in my file /etc/security/access.conf for the purpose of my testing.</div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;"><br></div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;">- : bryan.harris.adm : ALL</div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;">- : ALL : ALL</div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;"><br></div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;">When I place the following into /etc/pam.d/sshd I can prevent my login. The error is "pam_access(sshd:account): access denied for user `bryan.harris.adm' from" which looks like exactly what I want to see.</div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;"><br></div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;">account required pam_access.so</div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;"><br></div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;">When I place the following into /etc/pam.d/sshd I can once again login just fine and access.conf seems to be ignored.</div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;"><br></div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;">account required pam_access.so listsep=,</div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;"><br></div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;">The motivation is that I want to only allow the AD group "Linux Admins" (without quotes) to be able to login. So eventually I want to get a line like - : @Linux Admins : ALL into my /etc/security/access.conf file.</div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;"><br></div><div style="font-family: Helvetica, Arial, Verdana, sans-serif;">Can anyone explain how I can make this work properly? I doubt I can convince the Windows guys to not use spaces in their group names but I could try.</div></div><div><pre style="font-family: Helvetica,Arial,sans-serif; font-size: 13px; white-space: pre-wrap" data-mce-style="font-family: Helvetica,Arial,sans-serif; font-size: 13px; white-space: pre-wrap;">Bryan</pre></div></body></html>