# What are the best practices for adding and removing users/groups to /etc/security/pam\_winbind.conf?

**URL:** <https://forum.ansible.com/t/what-are-the-best-practices-for-adding-and-removing-users-groups-to-etc-security-pam-winbind-conf/27134>\
**Category:** Ansible Project\
**Created:** [March 27, 2018, 6:15pm UTC](https://forum.ansible.com/t/what-are-the-best-practices-for-adding-and-removing-users-groups-to-etc-security-pam-winbind-conf/27134 "2018-03-27T18:15:13Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tchia04](https://avatars.discourse-cdn.com/v4/letter/t/fbc32d/32.png) [@Tchia04](https://forum.ansible.com/u/Tchia04)\
**Post date:** [March 27, 2018, 6:15pm UTC](https://forum.ansible.com/t/what-are-the-best-practices-for-adding-and-removing-users-groups-to-etc-security-pam-winbind-conf/27134/1 "2018-03-27T18:15:13Z")

</div>

in particular I am looking to manage the require\_membership\_of field in /etc/security/pam\_winbind.conf through ansible.

# make successful authentication dependend on membership of one SID

# (can also take a name)

require\_membership\_of = user1,group1