[Fedora-directory-users] Question re: {KERBEROS} syntax

Paul Engle pengle at rice.edu
Tue Jul 25 21:36:42 UTC 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



- --On Tuesday, July 25, 2006 05:13:56 PM -0400 Tom Ryan 
<tomryan at camlaw.rutgers.edu> wrote:

>
> On 7/25/06 5:06 PM, "Richard Megginson" <rmeggins at redhat.com> wrote:
>
>
> Tom Ryan wrote:
>> Also, is there a reason this (the pam_passthru) module is not
>> distributed in the rpm?
> It hasn't been fully tested yet, although it has been in production in
> Red Hat for a few months now - it's how we do the same thing - simple
> username/password auth against Kerberos.
>
>
> Any chance of a binary being made available of it? I am having a heck of
> a time building it :)
>
> Tom

It was a klunky solution, but when I wanted to build the plugin, I ended up 
downloading the dsbuild-fds102 (all-in-one) source tarball, modifying 
dsbuild-fds102/ds/ldapserver/work/fedora-ds-1.0.2/ldap/servers/plugins/Makefile 
so that the pam_plugin was built by default, and doing the full build. 
Afterwards, I just grabbed the pam-passthrough-plugin.so file and dropped 
it into place into the existing /opt/fedora-ds/lib directory from my binary 
rpm install.

Waaaay overkill, I know. But I wasn't going to fight with trying to build 
just one module on its own. I'm lazy. :)  It seems to be working just fine. 
We're about to bless the system and roll it out into production.

  -paul

- -- 
Paul D. Engle                | Rice University
Sr. Systems Administrator    | Information Technology - MS119
(713) 348-4702               | P.O. Box 1892
pengle at rice.edu              | Houston, TX 77251-1892
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFExo7qCpkISWtyHNsRAjcsAJsEgEn/oZDaYhWL2bmouAx39XGSHACfYfwr
r1Pbl3ujxGeZXpyOg93qxI4=
=dqhl
-----END PGP SIGNATURE-----




More information about the Fedora-directory-users mailing list