Module to restrict access based on NIS or HESIOD netgroup membership. This module allows one to specify a file containing a list of users or groups which are allowed to use a service. The elements of the list can be preceded by '+' or '-' characters to explicitly match or not match, thereby allowing a reasonably flexible matching scheme (e.g. all members of groupA which are not in groupB). "Groups" can be standard Unix groups, standard NIS netgroups, or any NIS or HESIOD map which can return a list of users when keyed on the group name, or a list of groups when keyed on an user name. "Users" in the above can be replaced with almost any PAM variable, and the sense of matching can be reversed (e.g. for deny-type files).
Current version is 1.0.1