In addition to the listfile module that someone mentioned, I have a PAM module pam_netgroups, available at http://www2.physics.umd.edu/~payerle/Software/PAM/ that can do authorization (account management group) based on assorted types of group membership. It may be overkill for your situation, as the name implies it is mainly for NIS/hesiod netgroups, but it can handle the standard Unix /etc/group also (maptype=unix, which then disables about half of the other options). Tom Payerle Dept of Physics payerle@physics.umd.edu University of Maryland (301) 405-6973 College Park, MD 20742-4111 Fax: (301) 314-9525 _______________________________________________ Pam-list@redhat.com https://listman.redhat.com/mailman/listinfo/pam-list