[opensuse] Restricting who can login when using AD Authentication