Autentisering via LDAP och Kerberos i FreeBSD 10 - Revision history

Peter at 17:46, 12 August 2023

2023-08-12T17:46:29Z

← Older revision		Revision as of 19:46, 12 August 2023
Line 174:		Line 174:
	{{RootCmd\|service sshd restart}}		{{RootCmd\|service sshd restart}}

	[[Category:~~Guide~~]]		[[Category:GammalGuide]]

Peter: /* Installera SSSD */

2016-03-12T19:50:35Z

Installera SSSD

← Older revision		Revision as of 21:50, 12 March 2016
Line 6:		Line 6:

	Installera följande:		Installera följande:
	{{RootCmd\|portmaster security/cyrus-~~sasl~~-gssapi}}		{{RootCmd\|portmaster security/cyrus-sasl2-gssapi}}
	Välj Heimdal från systemetet, dvs BASE.		Välj Heimdal från systemetet, dvs BASE.
	{{RootCmd\|portmaster net/openldap24-sasl-client}}		{{RootCmd\|portmaster net/openldap24-sasl-client}}

Peter: /* SSSD */

2016-02-22T13:19:24Z

SSSD

← Older revision		Revision as of 15:19, 22 February 2016
Line 119:		Line 119:
	entry_cache_timeout = 300		entry_cache_timeout = 300
	entry_cache_nowait_percentage = 75		entry_cache_nowait_percentage = 75
			#override_shell = /usr/local/bin/bash
			#override_homedir = /usr/home/%u

	[pam]		[pam]

Peter: Peter moved page Autentisering via LDAP/Kerberos i FreeBSD 10 to Autentisering via LDAP och Kerberos i FreeBSD 10 without leaving a redirect

2016-01-14T16:56:39Z

Peter moved page Autentisering via LDAP/Kerberos i FreeBSD 10 to Autentisering via LDAP och Kerberos i FreeBSD 10 without leaving a redirect

← Older revision	Revision as of 18:56, 14 January 2016
(No difference)

Peter: /* PAM */

2016-01-03T12:41:27Z

PAM

← Older revision		Revision as of 14:41, 3 January 2016
Line 46:		Line 46:
	auth sufficient pam_opie.so no_warn no_fake_prompts		auth sufficient pam_opie.so no_warn no_fake_prompts
	auth requisite pam_opieaccess.so no_warn allow_local		auth requisite pam_opieaccess.so no_warn allow_local
	auth sufficient /usr/local/lib/pam_sss.so forward_pass		'''auth sufficient /usr/local/lib/pam_sss.so forward_pass'''
	#auth sufficient pam_krb5.so no_warn try_first_pass		#auth sufficient pam_krb5.so no_warn try_first_pass
	#auth sufficient pam_ssh.so no_warn try_first_pass		#auth sufficient pam_ssh.so no_warn try_first_pass
Line 52:		Line 52:

	# account		# account
	account required /usr/local/lib/pam_sss.so ignore_unknown_user ignore_authinfo_unavail		'''account required /usr/local/lib/pam_sss.so ignore_unknown_user ignore_authinfo_unavail'''
	#account required pam_krb5.so		#account required pam_krb5.so
	account required pam_login_access.so		account required pam_login_access.so
Line 62:		Line 62:

	# password		# password
	password sufficient /usr/local/lib/pam_sss.so use_authtok		'''password sufficient /usr/local/lib/pam_sss.so use_authtok'''
	#password sufficient pam_krb5.so no_warn try_first_pass		#password sufficient pam_krb5.so no_warn try_first_pass
	password required pam_unix.so no_warn try_first_pass		password required pam_unix.so no_warn try_first_pass

Peter: /* PAM */

2016-01-03T12:40:53Z

PAM

Peter: /* PAM */

2016-01-03T12:39:10Z

PAM

← Older revision		Revision as of 14:39, 3 January 2016
Line 53:		Line 53:
	# account		# account
	account required /usr/local/lib/pam_sss.so ignore_unknown_user ignore_authinfo_unavail		account required /usr/local/lib/pam_sss.so ignore_unknown_user ignore_authinfo_unavail
	#account required pam_krb5.so		#account required pam_krb5.so
	account required pam_login_access.so		account required pam_login_access.so
	account required pam_unix.so		account required pam_unix.so

	# session		# session
	#session optional pam_ssh.so want_agent		#session optional pam_ssh.so want_agent
	session required pam_lastlog.so no_fail		session required pam_lastlog.so no_fail

	# password		# password
	password sufficient /usr/local/lib/pam_sss.so use_authtok		password sufficient /usr/local/lib/pam_sss.so use_authtok
	#password sufficient pam_krb5.so no_warn try_first_pass		#password sufficient pam_krb5.so no_warn try_first_pass
	password required pam_unix.so no_warn try_first_pass		password required pam_unix.so no_warn try_first_pass
	}}		}}

Peter: /* PAM */

2016-01-03T12:38:29Z

PAM

← Older revision		Revision as of 14:38, 3 January 2016
Line 44:		Line 44:
	{{bc\|1=		{{bc\|1=
	# auth		# auth
	auth sufficient pam_opie.so no_warn no_fake_prompts		auth sufficient pam_opie.so no_warn no_fake_prompts
	auth requisite pam_opieaccess.so no_warn allow_local		auth requisite pam_opieaccess.so no_warn allow_local
	auth sufficient /usr/local/lib/pam_sss.so forward_pass		auth sufficient /usr/local/lib/pam_sss.so forward_pass
	#auth sufficient pam_krb5.so no_warn try_first_pass		#auth sufficient pam_krb5.so no_warn try_first_pass
	#auth sufficient pam_ssh.so no_warn try_first_pass		#auth sufficient pam_ssh.so no_warn try_first_pass
	auth required pam_unix.so no_warn try_first_pass nullok		auth required pam_unix.so no_warn try_first_pass nullok

	# account		# account
	account required /usr/local/lib/pam_sss.so ignore_unknown_user ignore_authinfo_unavail		account required /usr/local/lib/pam_sss.so ignore_unknown_user ignore_authinfo_unavail
	#account required pam_krb5.so		#account required pam_krb5.so
	account required pam_login_access.so		account required pam_login_access.so
	account required pam_unix.so		account required pam_unix.so

	# session		# session
	#session optional pam_ssh.so want_agent		#session optional pam_ssh.so want_agent
	session required pam_lastlog.so no_fail		session required pam_lastlog.so no_fail

	# password		# password
	password sufficient /usr/local/lib/pam_sss.so use_authtok		password sufficient /usr/local/lib/pam_sss.so use_authtok
	#password sufficient pam_krb5.so no_warn try_first_pass		#password sufficient pam_krb5.so no_warn try_first_pass
	password required pam_unix.so no_warn try_first_pass		password required pam_unix.so no_warn try_first_pass
	}}		}}

Peter: /* SSSD */

2016-01-03T12:32:43Z

SSSD

← Older revision		Revision as of 14:32, 3 January 2016
Line 162:		Line 162:

	Verifiera med kommandona:		Verifiera med kommandona:
	{{RootCmd\|getent passwd		{{RootCmd\|getent passwd <username>
	\|getent group		\|getent group <groupname>
	}}		}}

Peter: /* SSSD */

2016-01-03T12:32:18Z

SSSD

← Older revision		Revision as of 14:32, 3 January 2016
Line 130:		Line 130:
	[domain/EXAMPLE.COM]		[domain/EXAMPLE.COM]
	debug_level = 0		debug_level = 0
	~~enumerate = true~~
	min_id = 5000		min_id = 5000
	cache_credentials = true		cache_credentials = true

← Older revision		Revision as of 14:40, 3 January 2016
Line 70:		Line 70:
	{{bc\|1=		{{bc\|1=
	# auth		# auth
	auth sufficient pam_opie.so no_warn no_fake_prompts		auth sufficient pam_opie.so no_warn no_fake_prompts
	auth requisite pam_opieaccess.so no_warn allow_local		auth requisite pam_opieaccess.so no_warn allow_local
	auth sufficient /usr/local/lib/pam_sss.so forward_pass		'''auth sufficient /usr/local/lib/pam_sss.so forward_pass'''
	#auth sufficient pam_krb5.so no_warn try_first_pass		#auth sufficient pam_krb5.so no_warn try_first_pass
	auth sufficient pam_ssh.so no_warn try_first_pass		auth sufficient pam_ssh.so no_warn try_first_pass
	auth required pam_unix.so no_warn try_first_pass		auth required pam_unix.so no_warn try_first_pass

	# account		# account
	account required pam_nologin.so		account required pam_nologin.so
	account required /usr/local/lib/pam_sss.so ignore_unknown_user ignore_authinfo_unavail		'''account required /usr/local/lib/pam_sss.so ignore_unknown_user ignore_authinfo_unavail'''
	#account required pam_krb5.so		#account required pam_krb5.so
	account required pam_login_access.so		account required pam_login_access.so
	account required pam_unix.so		account required pam_unix.so

	# session		# session
	#session optional pam_ssh.so want_agent		#session optional pam_ssh.so want_agent
	session required pam_permit.so		session required pam_permit.so

	# password		# password
	password sufficient /usr/local/lib/pam_sss.so use_authtok		'''password sufficient /usr/local/lib/pam_sss.so use_authtok'''
	#password sufficient pam_krb5.so no_warn try_first_pass		#password sufficient pam_krb5.so no_warn try_first_pass
	password required pam_unix.so no_warn try_first_pass		password required pam_unix.so no_warn try_first_pass
	}}		}}