I have been working on getting /etc/security/access.conf to work as expected and so far every user can still login. Details are below. I added the following line to /etc/pam.d/loginaccount required pam_access.soI also added the following lines in /etc/security/access.conf+ : root : ALL+ : group_name : ALL- : ALL : ALLgroup_name is a group inside of our LDAP server (FreeIPA). Any user is still able to login regardless if they are a part of ${group_name}. I can SSH into the server without any issues from any user. Can someone help point out where I am incorrect at? I am running RHEL 6.5. Thanks
Restrict login via user group in access.conf
linux;rhel;security;pam