Authentication in multiple hosts

Hello!

I'm configuring an LDAP server for authentication, but I need multiple hosts using it. However, some users can't authenticate on some hosts.
Then, how do I do that?

ACL maybe, I don't know!

I thought in groups. A common group for all the users, and other only for admins. Thus, the users contained in admin group can login on all hosts, and the remaining users on some of them. Is it the right way?

Hello there!

I solved my trouble with pam_listfile, a PAM module. It can allow/deny login to a list of groups/users and more.
Thx for help.

See ya!