On Sat, Mar 18, 2006 at 07:47:19PM -0500, Ron Wheeler wrote:
> The nsswitch.conf list files and winbind for groups but the ssh
> documentation said that only primary groups were used.

Where was that? AllowGroups in sshd_config(5) says "If specified,
login is allowed only for users whose primary group or supplementary
group list matches one of the patterns".

Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.