[prev in list] [next in list] [prev in thread] [next in thread] 

List:       pam-list
Subject:    Re: Kerberos 5
From:       Nicolas Williams <Nicolas.Williams () ubsw ! com>
Date:       2001-02-27 19:06:19
[Download RAW message or body]

Ooops, that's Frank Cusack.

And the reasons his is the best PAM_KRB5 I've seen so far are:

 - it handles password aging gracefully:
    - it uses krb5_get_init_creds_password()
    - it has a MIT krb5 <-> PAM prompter function

 - it does NOT use internal MIT krb5 APIs (e.g., the profile library)

 - it's fully configurable via /etc/pam.conf only (Kerberos-specific
   items are configured via /etc/krb5.conf

 - the FreeBSD ports folk have added Heimdal support


Nico

On Tue, Feb 27, 2001 at 12:45:34PM -0500, Nicolas Williams wrote:
> There's many.
> 
> Search on Google...
> 
> But here's a hint: the best one I've found is Fran Cusack's PAM_KRB5
                                                ^^^^
						Frank


> which you can find on http://www.fcusack.com/. The FreeBSD folks have a
> port that includes some patches which I recommend you apply.

[...]

> On Mon, Feb 26, 2001 at 08:26:14PM +0100, Alex Schenkman wrote:
> > Is there a PAM module for Kerberos 5 ?
> > 
> > Thanks
> > 
> > 
> > 
> > _______________________________________________
> > Pam-list mailing list
> > Pam-list@redhat.com
> > https://listman.redhat.com/mailman/listinfo/pam-list
> --
> 
> 
> 
> _______________________________________________
> Pam-list mailing list
> Pam-list@redhat.com
> https://listman.redhat.com/mailman/listinfo/pam-list
--



_______________________________________________
Pam-list mailing list
Pam-list@redhat.com
https://listman.redhat.com/mailman/listinfo/pam-list

[prev in list] [next in list] [prev in thread] [next in thread]