I have a LDAP server and a predefined shell (bash) set in it. But there are some machine on which I want a different shell to be used whenever user login to that instead of the shell stored in LDAP.
How can I do this?? Can someone give me some direction in this?
Thank you
In /etc/ldap.conf add the following line:
nss_override_attribute_value loginShell <different_shell> Best of luck,
João Miguel Neves
/etc/init.d/nscd restart) Shared home directories? If not, put into the users ~/.bash_profile (or whatever is the proper file, check INVOCATION in man bash):
exec /bin/tcsh Or whatever shell you wish to replace bash with.
If they login using ssh, then you could use keypairs and forced commands.
Please note, depending where you place the exec for another shell, commands like scp may not function properly if you do not check for an interactive shell, like in the /etc/skel/.bashrc on Ubuntu.
Your best bet is to kindly ask your LDAP admin to change the loginShell for your LDAP user.
Thirteen years later ... for anyone finding this post while looking for a way to locally override the shell for a specific LDAP user on a specific host, there's a way you can do it by writing the override to the SSSD cache.
For example, something like
sudo sss_override user-add myuser -s /sbin/nologin will set the shell locally for myuser to /sbin/nologin (preventing normal logins on that system). Use user-del to remove the override.
Typically you'll need to restart the daemon after making these changes.
sudo systemctl restart sssd You'll probably need to install a package to use sss_override, eg. sssd-tools on RHEL.
