Introduction to the Kerberos Products and GSS-API

PAM Kerberos

ftp

auth required

libpam_unix.so.1

try_first_pass

 

OTHER

auth sufficient

libpam_unix.so.1

#

 

 

#Account management

login

account required

libpam_krb5.so.1

login

account required

libpam_unix.so.1

su

account required

libpam_krb5.so.1

su

account required

libpam_unix.so.1

dtlogin

account required

libpam_krb5.so.1

dtlogin

account required

libpam_unix.so.1

dtaction

account required

libpam_krb5.so.1

dtaction

account required

libpam_unix.so.1

ftp

account required

libpam_krb5.so.1

ftp

account required

libpam_unix.so.1

OTHER

account sufficient libpam_unix.so.1

#

 

 

#Session management

login

session required

libpam_krb5.so.1

login

session required

libpam_unix.so.1

dtlogin

session required

libpam_krb5.so.1

dtlogin

session required

libpam_unix.so.1

dtaction

session required

libpam_krb5.so.1

dtaction

session required

libpam_unix.so.1

OTHER

session sufficient libpam_unix.so.1

#

 

 

#Password management

login

password sufficient

libpam_krb5.so.1

login

password required

libpam_unix.so.1

passwd

password sufficient

libpam_krb5.so.1

passwd

password required

libpam_unix.so.1

dtlogin

password sufficient

libpam_krb5.so.1

dtlogin

password required

libpam_unix.so.1

dtaction

password sufficient

libpam_krb5.so.1

dtaction

password required

libpam_unix.so.1

OTHER

password sufficient

libpam_unix.so.1

Chapter 2

45