Pam krb5 - Revision history

Tgurr at 14:13, 27 July 2011

2011-07-27T14:13:30Z

← Older revision		Revision as of 16:13, 27 July 2011
Line 6:		Line 6:

	== Packages ==		== Packages ==
	{{~~Box~~ Code\|emerge pam_krb5 -pv\|		{{Code\|emerge pam_krb5 -pv\|
	<pre>		<pre>
	[ebuild N ] sys-auth/pam_krb5-3.10 USE="-doc" 153 kB		[ebuild N ] sys-auth/pam_krb5-3.10 USE="-doc" 153 kB
Line 13:		Line 13:

	== Installation ==		== Installation ==
	{{~~Codeline~~\|# emerge pam_krb5}}		{{Root\|emerge pam_krb5}}

	== Configuration ==		== Configuration ==
	{{~~Box~~ File\|~~nano -w~~ /etc/pam.d/system-auth\|		{{File\|/etc/pam.d/system-auth\|
	<pre>		<pre>
	#%PAM-1.0		#%PAM-1.0
Line 40:		Line 40:

	== Add User Permissions ==		== Add User Permissions ==
	{{~~Codeline~~\|# usermod -a -G wheel,plugdev,audio,cdrom,video,lp,kvm,qemu <user>}}		{{Root\|usermod -a -G wheel,plugdev,audio,cdrom,video,lp,kvm,qemu <user>}}

Tgurr: /* Add User Permissions */

2009-01-29T14:17:08Z

Add User Permissions

← Older revision		Revision as of 16:17, 29 January 2009
Line 40:		Line 40:

	== Add User Permissions ==		== Add User Permissions ==
	{{Codeline\|# usermod -G wheel,plugdev,audio,cdrom,video,lp,kvm,qemu <user>}}		{{Codeline\|# usermod -a -G wheel,plugdev,audio,cdrom,video,lp,kvm,qemu <user>}}

Tgurr at 14:16, 29 January 2009

2009-01-29T14:16:28Z

← Older revision		Revision as of 16:16, 29 January 2009
Line 38:		Line 38:
	</pre>		</pre>
	}}		}}

			== Add User Permissions ==
			{{Codeline\|# usermod -G wheel,plugdev,audio,cdrom,video,lp,kvm,qemu <user>}}

Tgurr: /* Description */

2008-06-20T08:54:25Z

Description

← Older revision		Revision as of 10:54, 20 June 2008
Line 1:		Line 1:
	== Description ==		== Description ==
	After we connected our Linux machine via Samba to our Windows ADS we now want ADS users to ~~login~~ to our Linux machine via single sign on using their ADS accounts and passwords. For this we need the pam module pam_krb5.		After we connected our Linux machine via Samba to our Windows ADS we now want ADS users to log in to our Linux machine via single sign on using their ADS accounts and passwords. For this we need the pam module pam_krb5.

	== Dependencies ==		== Dependencies ==

Tgurr: Die Seite wurde neu angelegt: == Description == After we connected our Linux machine via Samba to our Windows ADS we now want ADS users to login to our Linux machine via single sign on using their A...

2008-06-20T08:40:54Z

Die Seite wurde neu angelegt: == Description == After we connected our Linux machine via Samba to our Windows ADS we now want ADS users to login to our Linux machine via single sign on using their A...

New page

== Description ==
After we connected our Linux machine via Samba to our Windows ADS we now want ADS users to login to our Linux machine via single sign on using their ADS accounts and passwords. For this we need the pam module pam_krb5.

== Dependencies ==
[[Samba]] - connected to ADS

== Packages ==
{{Box Code|emerge pam_krb5 -pv|
<pre>
[ebuild N ] sys-auth/pam_krb5-3.10 USE="-doc" 153 kB
</pre>
}}

== Installation ==
{{Codeline|# emerge pam_krb5}}

== Configuration ==
{{Box File|nano -w /etc/pam.d/system-auth|
<pre>
#%PAM-1.0

auth required pam_env.so
auth sufficient pam_unix.so try_first_pass likeauth nullok
auth sufficient pam_krb5.so # allow users from windows active directory
auth required pam_deny.so

account required pam_unix.so
account sufficient pam_krb5.so minimum_uid=1100 # allow users from windows active directory

password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 try_first_pass retry=3
password sufficient pam_unix.so try_first_pass use_authtok nullok md5 shadow
password required pam_deny.so

session required pam_limits.so
session required pam_unix.so
session optional pam_krb5.so minimum_uid=1100 # allow users from windows active directory
session optional pam_mkhomedir.so skel=/etc/skel umask=0022 silent # create new homedir for windows active directory users
</pre>
}}