pam_krb5_migrate 0.0.5 review

pam_krb5_migrate is a stackable authentication module that takes a username and password from an earlier module in the stack and atte

License: GPL (GNU General Public License) File size: 9K Developer: Steve Langasek

0

pam_krb5_migrate is a stackable authentication module that takes a username and password from an earlier module in the stack and attempts to transparently add the user to a Kerberos realm using the Kerberos 5 kadmin service.

pam_krb5_migrate PAM module can be used to ease the administrative burdens of migrating a large installed userbase from pre-existing authentication methods to a Kerberos-based setup.

The following options are recognized by the module:

debug turn debug logging on
keytab=< file > use alternate keytab for authentication (default is /etc/security/pam_krb5.keytab)
min_uid=< uid > don't add principals for uid's lower than < uid >. (default is 100)
principal=< name > use the key for instead of the default pam_migrate/< hostname > key
realm=< REALM > update the database for a realm other than the default realm.

Requirements:
Linux-PAM

What's New in This Release:
Compatibility with heimdal Kerberos has been fixed, and a manual page has been added.