We are trying to drop in Kerberos authentication in Fedora 32 for NIS. I have Kerberos working, H/T to https://docs.oracle.com/en/operating-systems/oracle-linux/7/userauth/ol7-auth.html#ol7-cfgkrb-auth.
The man page for it at https://docs.oracle.com/cd/E23824_01/html/821-1474/pam-krb5-migrate-5.html#REFMAN5pam-krb5-migrate-5 applies to Solaris as they reference /etc/pam.auth and has an extra field in the PAM authentication stack, e.g. 'gdm', 'login' and 'k5migrate'. I've seen the previous discussions at https://www.mail-archive.com/kerberos@mit.edu/msg15841.html and https://www.mail-archive.com/kerberos@mit.edu/msg15534.html I see there are source packages albeit for Debian at https://www.samba.org/~jelmer/pam_krb5_migrate/. I used 'ar x' to extract the files from .deb and copied pam_krb5_migrate_mit.so to /usr/lib/security and made a sym link at /usr/lib64/security/pam_krb5_migrate.so.1. Got the following errors: /usr/lib64/security/pam_krb5_migrate.so.1): lib kadm5clnt_mit.so.11: cannot open shared object file: No such file or directory ourserver crond[52612]: PAM adding faulty module: /usr/lib64/security/pam_krb5_migrate.so.1 ourserver crond[52612]: PAM (crond) illegal module type: k5migrate ourserver crond[52612]: PAM pam_parse: expecting return value; [...auth] Is there a way to get this module for Fedora? ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
