[14597] in Kerberos
Re: canonical kerberos pam module for solaris 2.7 ?
daemon@ATHENA.MIT.EDU (Dennis Davis)
Tue Jun 26 05:09:24 2001
Date: Tue, 26 Jun 2001 10:03:27 +0100 (BST)
From: Dennis Davis <ccsdhd@bath.ac.uk>
To: Martin Schulz <schulz@iwrmm.math.uni-karlsruhe.de>
cc: kerberos@mit.edu
Reply-To: Dennis Davis <D.H.Davis@bath.ac.uk>
Message-ID: <200106261003.aa25534@hinault.bath.ac.uk>
>Date: Mon, 25 Jun 2001 12:19:01 -0400
>From: Nicolas Williams <Nicolas.Williams@ubsw.com>
>To: Martin Schulz <schulz@iwrmm.math.uni-karlsruhe.de>
>Cc: kerberos@mit.edu
>Subject: Re: canonical kerberos pam module for solaris 2.7 ?
>
>There's a number of PAM_KRB5 modules available. I think I have
>downloaded some 6 or 7 distinct such modules.
>
>Since you're running Solaris you might want to check the PAM_KRB5
>that comes with Solaris 8 (and which is available for Solaris 2.6
>and 7, as part of 'SEAM', which can be found in the Easy Access ...
>collection.
>
>The module I prefer (I'm biased, I wrote some of it) can be found
>at SourceForge, in the PAM project, as a top-level module, in the
>'devl' branch in CVS. The original is by Frank Cusack.
>
>But check out the others. Search on your favorite search
>engine. There's one by Curtis King, another by Naomaru Itoi, yet
>another that can be found, with some effort, in the Heimdal web
>site, then there is Redhat's and you may even be able to find Sun's
>in their open-ish Solaris 8 source. And there may yet be others I
>am unaware of.
>
>PAM_KRB5 is one very re-invented wheel!
>
>It would be nice if MIT and/or Heimdal were to select/write a
>PAM_KRB5 for inclusion in their distribution...
There's KerberosV and KerberosIV PAM modules at:
ftp://ftp.dementia.org/pub/pam
and a description of experience with the KerberosIV PAM module
and Solaris at:
http://www.dementia.org/~shadow/pam.html
I've used neither PAM module and so can't comment further.
