File: README

package info (click to toggle)
pam-krb5-migrate 0.0.11-5
  • links: PTS, VCS
  • area: main
  • in suites: bookworm, bullseye, buster, sid
  • size: 192 kB
  • ctags: 20
  • sloc: ansic: 379; makefile: 61; sh: 10
file content (30 lines) | stat: -rw-r--r-- 1,334 bytes parent folder | download | duplicates (4)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
pam_krb5_migrate is a stackable authentication module that takes a username
and password from an earlier module in the stack, and attempts to
transparently add them to a Kerberos realm using the Kerberos 5 kadmin
service.
The module can be used to ease the administrative burdens of migrating a
large installed userbase from pre-existing authentication methods to a
Kerberos-based setup.

The most current version of this module can always be found at
http://samba.org/~jelmer/pam_krb5_migrate

For sample usage in a module stack, see the enclosed login.pam file.

The following options are recognized by the module:

debug                 turn debug logging on
keytab=<file>         use alternate keytab for authentication
                         (default is /etc/security/pam_krb5.keytab)
min_uid=<uid>         don't add principals for uid's lower than <uid>.
                         (default is 100)
principal=<name>      use the key for <name> instead of the default
                         pam_migrate/<hostname> key
realm=<REALM>         update the database for a realm other than the
                         default realm.

pam_krb5_migrate was written by Steve Langasek <vorlon@netexpress.net>.

Please send questions and comments (and especially bugfixes) to the current 
maintainer, Jelmer Vernooij <jelmer@samba.org>.