I am trying to set up a couple of Linux workstations (RedHat 7), and I am trying to figure out how to set up authentication against an LDAP server with some unusual requirements.I basically know how to set up LDAP authentication using sssd, but I don't know how to restrict authentication to only certain users to meet my requirement.To enable LDAP configuration, I would use this command line:authconfig --enableldap --enableldapauth --ldapserver=<redacted> --ldapbasedn=<redacted> --update --enablemkhomedirThis will allow all LDAP users to log on, and as far as I know works just fine. However, my requirement is that only some users from LDAP can log in, and the list of users will be supplied in a separate text file (by user login name).More information: We have an LDAP server (Active Directory, actually) with a couple thousand users. Only about 20 of them who have a need to work on these workstations should be allowed to log on to these workstation. Unfortunately, LDAP does not include any information related to this, and I do not have control of the LDAP server. Instead, every couple of weeks, I get a text file with a list of the user names who should be allowed to log on.How can I set up authentication to use LDAP for user name/password/user ID etc. while also restricting it to only users on this list?
Using openldap authentication only for some users
pam;openldap;sssd