On Tue, 01 Mar 2005 21:52:39 +0100, Tomas Mraz <tmraz@xxxxxxxxxx> wrote: > On Tue, 2005-03-01 at 13:33 -0700, Matt Alexander wrote: > > I'm trying to get Apache to authenticate users to an Active Directory server. > > > > In /var/log/messages, I get: > > > > pam_winbind[31194]: user 'matt' granted access > > > > But, in the Apache error_log, I get: > > > > GROUP: matt not in required group(s). > ... > > The user "matt" is in the AD "testgroup". Any ideas where the problem may be? > Do you have 'group: files winbind' in /etc/nsswitch.conf? > What does 'getent group testgroup' prints? Ah ha! I didn't have winbind in /etc/nsswitch.conf... Thanks! ~M _______________________________________________ Pam-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/pam-list