Verwijderd
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
| # This is the configuration file for the LDAP nameservice # switch library and the LDAP PAM module. # # PADL Software # http://www.padl.com # # Your LDAP server. Must be resolvable without using LDAP. # host 127.0.0.1 # The distinguished name of the search base. base dc=nklomp,dc=com # Another way to specify your LDAP server is to provide an # uri with the server name. This allows to use # Unix Domain Sockets to connect to a local LDAP Server. #uri ldap://127.0.0.1/ uri ldaps://ldap1.nklomp.com/ #uri ldapi://%2fvar%2frun%2fldapi_sock/ # Note: %2f encodes the '/' used as directory separator # The LDAP version to use (defaults to 3 # if supported by client library) ldap_version 3 # The distinguished name to bind to the server with. # Optional: default is to bind anonymously. #binddn cn=nss,dc=nklomp,dc=com # The credentials to bind with. # Optional: default is no credential. #bindpw xxxxxxxx # The distinguished name to bind to the server with # if the effective user ID is root. Password is # stored in /etc/ldap.secret (mode 600) rootbinddn cn=manager,dc=nklomp,dc=com # The port. # Optional: default is 389. #port 389 # The search scope. #scope sub #scope one #scope base # Search timelimit #timelimit 30 # Bind timelimit #bind_timelimit 30 # Filter to AND with uid=%s #pam_filter objectclass=account # The user ID attribute (defaults to uid) #pam_login_attribute uid # Search the root DSE for the password policy (works # with Netscape Directory Server) #pam_lookup_policy yes # Check the 'host' attribute for access control # Default is no; if set to yes, and user has no # value for the host attribute, and pam_ldap is # configured for account management (authorization) # then the user will not be allowed to login. #pam_check_host_attr yes # Group to enforce membership of #pam_groupdn cn=PAM,ou=Groups,dc=example,dc=net # Group member attribute #pam_member_attribute uniquemember # Specify a minium or maximum UID number allowed #pam_min_uid 0 #pam_max_uid 0 # Template login attribute, default template user # (can be overriden by value of former attribute # in user's entry) #pam_login_attribute userPrincipalName #pam_template_login_attribute uid #pam_template_login nobody # HEADS UP: the pam_crypt, pam_nds_passwd, # and pam_ad_passwd options are no # longer supported. # Do not hash the password at all; presume # the directory server will do it, if # necessary. This is the default. pam_password crypt # Hash password locally; required for University of # Michigan LDAP server, and works with Netscape # Directory Server if you're using the UNIX-Crypt # hash mechanism and not using the NT Synchronization # service. #pam_password crypt # Remove old password first, then update in # cleartext. Necessary for use with Novell # Directory Services (NDS) #pam_password nds # Update Active Directory password, by # creating Unicode password and updating # unicodePwd attribute. #pam_password ad # Use the OpenLDAP password change # extended operation to update the password. #pam_password exop # configure --enable-mssfu-schema is no longer supported. # For MSSFU now do: #pam_login_attribute msSFUName #pam_filter objectclass=User #pam_password ad # configure --enable-authpassword is no longer supported # For authPassword support, now do: #pam_password nds # For IBM SecureWay support, do: #pam_login_attribute userName #pam_filter objectclass=aixAccount #pam_password clear |
Dat lijkt me een duidelijke vraag: welke opties kun je meegeven bij het laden van de kernel module, waar zet je die neer, en waar is te vinden welke er zoal zijn, want de documentatie zuigt (blijkbaar).
[ Voor 3% gewijzigd door Wilke op 04-08-2003 00:29 ]
) en met mijn gebrekkige C kennis kon ik dit stuk eruit hengelen:1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
| for (i = 0; i < argc; i++) { if (!strcmp (argv[i], "use_first_pass")) use_first_pass = 1; else if (!strcmp (argv[i], "try_first_pass")) try_first_pass = 1; else if (!strncmp (argv[i], "config=", 7)) configFile = argv[i] + 7; else if (!strcmp (argv[i], "ignore_unknown_user")) ignore_flags |= IGNORE_UNKNOWN_USER; else if (!strcmp (argv[i], "ignore_authinfo_unavail")) ignore_flags |= IGNORE_AUTHINFO_UNAVAIL; else if (!strcmp (argv[i], "no_warn")) ; else if (!strcmp (argv[i], "debug")) ; else syslog (LOG_ERR, "illegal option %s", argv[i]); } |
/u/25932/icon.png?f=community){kind=icon}