Add all LDAP users to a local group?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}
Is there a way to add every LDAP users to a local group on Debian ?
I have more than 1500 ldap users, and they need to be in local groups ('video', 'audio' and 'games') on some computers (Raspbian).
I'm using nslcd and nsswitch to enable ldap login, and pam_mount to mount my remote directories.
So I thought using nslcdp "map" option, but I think this option is not relevant here.
So I thought using the pam_group thing, but I don't understand which PAM service i should use...
Finally I tried a script with setuid, but setuid is not supported anymore for security reasons.
Hope you will have a hint for me...
Regards,
Thomas
linux debian ldap users user-groups
edited Feb 8 at 18:30
GAD3R
2,4421226
asked Feb 6 at 18:22
AzcaAzca
62
add a comment |
Is there a way to add every LDAP users to a local group on Debian ?
I have more than 1500 ldap users, and they need to be in local groups ('video', 'audio' and 'games') on some computers (Raspbian).
I'm using nslcd and nsswitch to enable ldap login, and pam_mount to mount my remote directories.
So I thought using nslcdp "map" option, but I think this option is not relevant here.
So I thought using the pam_group thing, but I don't understand which PAM service i should use...
Finally I tried a script with setuid, but setuid is not supported anymore for security reasons.
Hope you will have a hint for me...
Regards,
Thomas
linux debian ldap users user-groups
edited Feb 8 at 18:30
GAD3R
2,4421226
asked Feb 6 at 18:22
AzcaAzca
62
add a comment |
Is there a way to add every LDAP users to a local group on Debian ?
I have more than 1500 ldap users, and they need to be in local groups ('video', 'audio' and 'games') on some computers (Raspbian).
I'm using nslcd and nsswitch to enable ldap login, and pam_mount to mount my remote directories.
So I thought using nslcdp "map" option, but I think this option is not relevant here.
So I thought using the pam_group thing, but I don't understand which PAM service i should use...
Finally I tried a script with setuid, but setuid is not supported anymore for security reasons.
Hope you will have a hint for me...
Regards,
Thomas
linux debian ldap users user-groups
edited Feb 8 at 18:30
GAD3R
2,4421226
asked Feb 6 at 18:22
AzcaAzca
62
Is there a way to add every LDAP users to a local group on Debian ?
I have more than 1500 ldap users, and they need to be in local groups ('video', 'audio' and 'games') on some computers (Raspbian).
I'm using nslcd and nsswitch to enable ldap login, and pam_mount to mount my remote directories.
So I thought using nslcdp "map" option, but I think this option is not relevant here.
So I thought using the pam_group thing, but I don't understand which PAM service i should use...
Finally I tried a script with setuid, but setuid is not supported anymore for security reasons.
Hope you will have a hint for me...
Regards,
Thomas
linux debian ldap users user-groups
linux debian ldap users user-groups
edited Feb 8 at 18:30
GAD3R
2,4421226
asked Feb 6 at 18:22
AzcaAzca
62
edited Feb 8 at 18:30
GAD3R
2,4421226
asked Feb 6 at 18:22
AzcaAzca
62
edited Feb 8 at 18:30
GAD3R
2,4421226
edited Feb 8 at 18:30
GAD3R
2,4421226
edited Feb 8 at 18:30
GAD3R
2,4421226
2,4421226
asked Feb 6 at 18:22
AzcaAzca
62
asked Feb 6 at 18:22
AzcaAzca
62
asked Feb 6 at 18:22
AzcaAzca
62
62
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
I was not able to find a way to add a LDAP user to a local group, so I updated the access rights of the system files owned by the video group :
In /etc/udev/rules.d/50video.rules :
KERNEL=="fb0",MODE="0666"
KERNEL=="vchiq",MODE="0666"
KERNEL=="vcio",MODE="0666"
KERNEL=="vcsm",MODE="0666"
Now my ldap users are allowed to use video chipset on the raspberry pi.
answered Feb 19 at 13:58
AzcaAzca
62
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1402803%2fadd-all-ldap-users-to-a-local-group%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I was not able to find a way to add a LDAP user to a local group, so I updated the access rights of the system files owned by the video group :
In /etc/udev/rules.d/50video.rules :
KERNEL=="fb0",MODE="0666"
KERNEL=="vchiq",MODE="0666"
KERNEL=="vcio",MODE="0666"
KERNEL=="vcsm",MODE="0666"
Now my ldap users are allowed to use video chipset on the raspberry pi.
answered Feb 19 at 13:58
AzcaAzca
62
add a comment |
I was not able to find a way to add a LDAP user to a local group, so I updated the access rights of the system files owned by the video group :
In /etc/udev/rules.d/50video.rules :
KERNEL=="fb0",MODE="0666"
KERNEL=="vchiq",MODE="0666"
KERNEL=="vcio",MODE="0666"
KERNEL=="vcsm",MODE="0666"
Now my ldap users are allowed to use video chipset on the raspberry pi.
answered Feb 19 at 13:58
AzcaAzca
62
add a comment |
I was not able to find a way to add a LDAP user to a local group, so I updated the access rights of the system files owned by the video group :
In /etc/udev/rules.d/50video.rules :
KERNEL=="fb0",MODE="0666"
KERNEL=="vchiq",MODE="0666"
KERNEL=="vcio",MODE="0666"
KERNEL=="vcsm",MODE="0666"
Now my ldap users are allowed to use video chipset on the raspberry pi.
answered Feb 19 at 13:58
AzcaAzca
62
I was not able to find a way to add a LDAP user to a local group, so I updated the access rights of the system files owned by the video group :
In /etc/udev/rules.d/50video.rules :
KERNEL=="fb0",MODE="0666"
KERNEL=="vchiq",MODE="0666"
KERNEL=="vcio",MODE="0666"
KERNEL=="vcsm",MODE="0666"
Now my ldap users are allowed to use video chipset on the raspberry pi.
answered Feb 19 at 13:58
AzcaAzca
62
answered Feb 19 at 13:58
AzcaAzca
62
answered Feb 19 at 13:58
AzcaAzca
62
answered Feb 19 at 13:58
AzcaAzca
62
62
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1402803%2fadd-all-ldap-users-to-a-local-group%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
