On Tue, 8 Nov 2011, James A. Peltier wrote: > acccess.conf supposed to support this type of functionality thereby > not needing to modify /etc/passwd / /etc/shadow!?! You'll probably need to add a pam_access.so reference to the stock /etc/pam.d/password-auth. Make the first "account" line account required pam_access.so Also, I assume that your system can access your netgroups properly, i.e., getent can see them: getent netgroup $groupname -- Paul Heinlein <> heinlein@xxxxxxxxxx <> http://www.madboa.com/ _______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx http://lists.centos.org/mailman/listinfo/centos