Solaris and MS AD integration, restricting user login
Hello,
I'm looking to restrict user logins to members of a certain MS AD group. System is a Solaris 11 and is MS AD joined. I am able to authenticate MS AD users on this Solaris box and I can search AD user and group information. I've configured PAM too look in /etc/users.allow. I was successful when adding individual AD users however when adding the AD group instead of users I was not successful. I've tried various options in the file as well. I've read it's possible to use AD groups to do this but haven't found a good document on