[Samba] Restricting logins using pam_winbind require_membership_of ?

[TAKAHASHI Motonobu]

From: John McNulty <johnmcn1 at gmail.com>
Date: Sat, 18 Jun 2011 15:14:07 +0100

> Ah, maybe I'm not being clear enough.  I want the AD users to be able to
> access the shares, but not ssh login to the system, which they can
> currently.

How have you configured around winbind?

By default, the shell for users created by winbindd is set to
"/bin/false" so they can not login to the system.

---
TAKAHASHI Motonobu <monyo at monyo.com> / @damemonyo
  http://damedame.monyo.com/ / http://facebook.com/monyot