Debian LDAP Usern sudo erlauben

# /etc/nslcd.conf
# nslcd configuration file. See nslcd.conf(5)
# for details.

# The user and group nslcd should run as.
uid nslcd
gid nslcd

# The location at which the LDAP server(s) should be reachable.
uri ldap://10.0.0.1/

# The search base that will be used for all queries.
base dc=domaene,dc=local

map     passwd          uid             sAMAccountName
map     passwd          gidNumber       primaryGroupID
map     passwd          homeDirectory   "/home/$sAMAccountName"
map     passwd          gecos           displayName
map     passwd          loginShell      "/bin/bash"
map     passwd          uidNumber       objectSid:S-1-6-21-821467511-133703555-685003330

filter  passwd          (&(objectClass=user)(memberof=CN=Linux-User,OU=Gruppen,DC=domaene,DC=local))

# The LDAP protocol version to use.
ldap_version 3

# The DN to bind with for normal lookups.
binddn CN=test_auth,OU=Test,OU=Admin,DC=domaene,DC=local
bindpw BindPasswort

# The DN used for password modifications by root.
#rootpwmoddn cn=admin,dc=example,dc=com

# SSL options
#ssl off
#tls_reqcert never
tls_cacertfile /etc/ssl/certs/ca-certificates.crt

# The search scope.
#scope sub

passwd:         files ldap
group:          files ldap
shadow:         files ldap
gshadow:        files

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

# here are the per-package modules (the "Primary" block)
session [default=1]                     pam_permit.so
# here's the fallback if no module succeeds
session requisite                       pam_deny.so
# prime the stack with a positive return value if there isn't one already;
# this avoids us returning an error just because nothing sets a success code
# since the modules above will each just jump around
session required                        pam_permit.so
# and here are more per-package modules (the "Additional" block)
session required        pam_unix.so
session [success=ok default=ignore]     pam_ldap.so minimum_uid=1000
session optional        pam_systemd.so
# end of pam-auth-update config

session optional        pam_mkhomedir.so skel=/etc/skel umask=077

map     passwd          uid             sAMAccountName
map     passwd          uidNumber       objectSid:S-1-5-21-865067501-1337903793-682003330
map     passwd          gidNumber       objectSid:S-1-5-21-865067501-1337903793-682003330
map     passwd          homeDirectory   "/home/$sAMAccountName"
map     passwd          gecos           displayName
map     passwd          loginShell      "/bin/bash"
map     group           gidNumber       objectSid:S-1-5-21-865067501-1337903793-682003330

filter  group           (objectClass=group)

filter  passwd          (&(objectClass=user)(memberof=CN=Linux-User,OU=Gruppen,DC=domaene,DC=local))