[38822] in Kerberos
how to install pam_krb5_migrate in RHEL/Fedora,
daemon@ATHENA.MIT.EDU (Robert Kudyba)
Fri Oct 23 09:54:06 2020
MIME-Version: 1.0
In-Reply-To: <CAFHi+KRSL04YPRC3PRij6AT1asNVecjJLEZPQAh6Vr1f20gvtg@mail.gmail.com>
From: Robert Kudyba <rkudyba@fordham.edu>
Date: Fri, 23 Oct 2020 09:51:01 -0400
Message-ID: <CAFHi+KRyQxewcfD6qL7_h7hm4RKQeDgEhmRxkSMKdDFnSob7Gw@mail.gmail.com>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
We are trying to drop in Kerberos authentication in Fedora 32 for NIS.
I have Kerberos working, H/T to
https://docs.oracle.com/en/operating-systems/oracle-linux/7/userauth/ol7-auth.html#ol7-cfgkrb-auth.
The man page for it at
https://docs.oracle.com/cd/E23824_01/html/821-1474/pam-krb5-migrate-5.html#REFMAN5pam-krb5-migrate-5
applies to Solaris as they reference /etc/pam.auth and has an extra
field in the PAM authentication stack, e.g. 'gdm', 'login' and
'k5migrate'.
I've seen the previous discussions at
https://www.mail-archive.com/kerberos@mit.edu/msg15841.html and
https://www.mail-archive.com/kerberos@mit.edu/msg15534.html
I see there are source packages albeit for Debian at
https://www.samba.org/~jelmer/pam_krb5_migrate/. I used 'ar x' to
extract the files from .deb and copied pam_krb5_migrate_mit.so to
/usr/lib/security and made a sym link at
/usr/lib64/security/pam_krb5_migrate.so.1. Got the following errors:
/usr/lib64/security/pam_krb5_migrate.so.1): lib kadm5clnt_mit.so.11:
cannot open shared object file: No such file or directory
ourserver crond[52612]: PAM adding faulty module:
/usr/lib64/security/pam_krb5_migrate.so.1
ourserver crond[52612]: PAM (crond) illegal module type: k5migrate
ourserver crond[52612]: PAM pam_parse: expecting return value; [...auth]
Is there a way to get this module for Fedora?
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
