CageFS and PowerBroker Identity Services Open Edition (PBIS) / Active Directory

[tomas.strand]

When enabling CageFS on our server with PBIS installed and configured to our Active Directory it adds every user in the entire AD tree to enabled user.

This is not a very big deal since only a few are allowed to login. but still.
Is there any way to only enabled local users to CageFS?

[iseletsk]

I guess part of the users available via PAM -- and you want only local users to be enabled.

Instead of using --enable-all option -- you would need to enable users by hand. I guess that is the only way to go, as we are unable to differentiate between local/non-local users.

[tomas.strand]

That works for me. Thanks!