I have been working on getting /etc/security/access.conf to work as expected and so far every user can still login. Details are below. 

I added the following line to /etc/pam.d/login

```
account required pam_access.so

```

I also added the following lines in /etc/security/access.conf

```
+ : root : ALL
+ : group_name : ALL
- : ALL : ALL

```

group\_name is a group inside of our LDAP server (FreeIPA). Any user is still able to login regardless if they are a part of ${group\_name}. I can SSH into the server without any issues from any user. Can someone help point out where I am incorrect at? I am running RHEL 6.5. Thanks