see http://wiki.debian.org/DebianDesktopHowTo
however "auth optional pam_group.so " needs to be before "auth sufficient pam_ldap.so" or else it won't work for ldap logins -- Simpler integration for "local device" permissions https://launchpad.net/bugs/10225 -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
