diff --git a/pam-webserver b/pam-webserver
index 473b922..a5e7af4 100644
--- a/pam-webserver
+++ b/pam-webserver
@@ -1,5 +1,8 @@
 #%PAM-1.0
 
 auth     include  common-auth
+# skip redfish group check for non-local user (ldap)
+auth     [success=ok perm_denied=1 default=ignore] pam_localuser.so
+auth     required pam_succeed_if.so user ingroup redfish
 account  include  common-account
 password include  common-password