Dear, I'm porting my working areas authentication on 389-ds. I've nominal user credential and project credential. So I have user and project that has the same POSIX ID but different POSIX group and OU. EG: morelli PosixID: 1000 groupID: 100 OU: Technical Staff java PosixID: 1000 groupID: 900 OU: Project Research Now under Linux, if I login with my credential I find that all my files are of the java project user. In the systems sssd.conf I have: access_provider = ldap ldap_access_order = filter ldap_access_filter = (gidNumber=100) Is it possible to avoid this problem? I want that in some machine only components of a determined group is able to login. The other users/groups hasn't to be visible. Thanks -- ------------------------------------------------------------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico Via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY phone: +39 055 457 4269 fax: +39 055 457 4927 ------------------------------------------------------------- -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users