[33586] in Kerberos
Re: pam_krb5 for AIX
daemon@ATHENA.MIT.EDU (Sonja Benz)
Fri Jul 15 11:03:07 2011
In-Reply-To: <87mxggglug.fsf@windlord.stanford.edu>
To: Russ Allbery <rra@stanford.edu>
MIME-Version: 1.0
From: Sonja Benz <sonja.benz@de.ibm.com>
Message-ID: <OFB7CC6BE8.C9FC1A8B-ONC12578CE.0052857E-C12578CE.0052A64C@de.ibm.com>
Date: Fri, 15 Jul 2011 17:02:45 +0200
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
That's great. We need a pam_krb5 which supports an option like
"no_user_check". I guess, yours does not?
Sonja
From:
Russ Allbery <rra@stanford.edu>
To:
Sonja Benz/Germany/IBM@IBMDE
Cc:
kerberos@mit.edu
Date:
07/15/2011 07:21 AM
Subject:
Re: pam_krb5 for AIX
Sonja Benz <sonja.benz@de.ibm.com> writes:
> a need pam_krb5 for AIX. Since AIX seems be special and a bit tricky if
> porting pam_krb5, I appriciate your advice: We do not necessarily need
> the newest package. A secure and easy to port one would be nice. The
> usage of pam_ldap will be limited in a way, where it will be dynamically
> called by another pam module which passes the user and its password and
> just is interesseted in success or failure status. Nothing else is
> needed.
My pam-krb5 did compile and work on AIX at one point in the past, I think,
although it's been a while and something else probably broke. I'm happy
to try to help with the porting if you want to give it a shot. It's at:
http://www.eyrie.org/~eagle/software/pam-krb5/
I don't have an AIX box, but after 15 years of porting UNIX software, I
can usually figure out what's wrong from the compiler error messages. :)
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
