James Dingwall <[email protected]> writes: > * What led up to the situation?
> We have one way domain trusts with Samba that winbind cannot > handle. To enable users to log in using a DOMAIN\user format name > instead of a kerberos principal we wanted a mappings option similar > to that available in the pam_krb5 version used in RHEL. > * What exactly did you do (or not do) that was effective (or > ineffective)? > We have modified the pam_krb5 module provided in Ubuntu 14.04 to > support this option. Source code changes are published in the > username-mappings branch of https://github.com/JKDingwall/pam-krb5 Could you put this up as a pull request against: https://github.com/rra/pam-krb5 instead? Unfortunately, no guarantees on how fast I can get to it, since I'm way behind on free software stuff at the moment, but I'll definitely take a look. (Good tests, if present, will definitely bump it up the priority list since that will mean I won't have to write tests myself -- I haven't looked at all yet.) -- Russ Allbery ([email protected]) <http://www.eyrie.org/~eagle/>
