On Fri, Apr 27, 2007 at 06:00:34PM -0700, Russ Allbery wrote: > Jelmer Vernooij <[EMAIL PROTECTED]> writes:
> > Package: wnpp > > Severity: wishlist > > Owner: Jelmer Vernooij <[EMAIL PROTECTED]> > > * Package name : pam-krb5-migrate > > Version : 0.0.05 > > Upstream Author : Steve Langasek <[EMAIL PROTECTED]> > > Jelmer Vernooij <[EMAIL PROTECTED]> > > * URL : http://www.freshmeat.net/projects/pam_krb5_migrate > > * License : GPL > > Description : PAM module for migrating to Kerberos > > > pam_krb5_migrate is a stackable authentication module that takes a > > username and password from an earlier module in the stack and attempts > > to transparently add the user to a Kerberos realm using the Kerberos 5 > > kadmin service. The module can be used to ease the administrative > > burdens of migrating a large installed userbase from pre-existing > > authentication methods to a Kerberos-based setup. > That's a very cool idea. > How does it handle the Kerberos administrative operations? Is it shelling > out to kadmin, or did you find a better way to handle that? It links to libkadm5clnt. The code was written well before libkadm5 had a suitable public API, so it hasn't been packaged before now because any migrations I needed it for are long done. :) -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. [EMAIL PROTECTED] http://www.debian.org/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]