Suppress Group not found error messages?

[brgerig]

I'm using tac_plus-ng with mavis backend for LDAP to Active Directory. It's working perfectly (and was remarkably easy to set up!). However, since our user accounts are in quite a few security groups, successful logins include these errors in the journalctl/log output:

tac_plus-ng[619659]: Error [user]:1: Group 'person' not found.
tac_plus-ng[619659]: Error [user]:1: Group 'employee' not found.
tac_plus-ng[619659]: Error [user]:1: Group 'information technology department' not found.

etc.

The matching group that's defined in the tac_plus-ng.cfg is not included in the error output, of course.

Is there any way to suppress those group errors, since it seems to me that they aren't really errors, just info? Or am I thinking about this wrong?

[MarcJHuber]

Hi,

well, that warning is there on purpose. You can filter out the groups you don't care about by defining a regex covering the ones you actually use:

mavis module mygroupfilter = groups {
    groups filter = /^(group1|group2|group3)$/
}

mavis module mybackend = external {
    ...
}

Cheers,

Marc