2
votes
0answers
24 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
1
vote
2answers
1k views

Configuring vsftpd to authenticate with Active Directory

We are trying to give vsftpd access to some Active Directory users. Here are some configuration file contents: # egrep -v '^(#.*|)$' vsftpd.conf anonymous_enable=YES local_enable=YES ...
1
vote
2answers
4k views

kinit & pam_sss: Cannot find KDC for requested realm while getting initial credentials

I have a very similar problem as described in this thread on CentOS 6.3 authenticating against a 2008R2 AD DC. Here is my krb5.conf, I know for a fact that XXXXXXX.LOCAL is the true domain name: ...
1
vote
2answers
184 views

How does Cron interact with Kerberos for authentication?

I have a CentOS 6.4 machine which is set up with pam_ldap and pam_krb5. It is configured to use our Active Directory servers for authentication. I can SSH into the machine using AD accounts. I have ...
0
votes
1answer
138 views

AD Login to Solaris Zone Periodically Not Working

I have a Solaris 11.1 zone named "AZone". I have the zone joined to an Active Directory domain (Windows Server 2008) with the goal of users being able to use their AD account to log in to the Solaris ...
1
vote
1answer
2k views

LdapErr: DSID-0C0903AA, data 52e: authenticating against AD '08 with pam_ldap

I have full admin access to the AD '08 server I'm trying to authenticate towards. The error code means invalid credentials, but I wish this was as simple as me typing in the wrong password. First ...
3
votes
1answer
965 views

Linux with winbind, disable local users while AD is available?

Routers and switches with RADIUS authentication can be configured such that login is disabled for locally configured users as long as the RADIUS server is available. If the RADIUS server becomes ...
9
votes
3answers
1k views

How to deny access to disabled AD accounts via kerberos in pam_krb5?

I have a working AD/Linux/LDAP/KRB5 directory and authentication setup, with one small problem. When an account is disabled, SSH publickey authentication still allows user login. It's clear that ...
2
votes
1answer
666 views

Problem with mixed cases in username

We have integrated a linux thin client with an AD using kerberos, pam and winbindd. We are using pam_mkhomedir to make the home dir, and that works fine. But the login scripts don't run when the AD ...
1
vote
1answer
689 views

PAM with KRB5 to Active Directory - How to prevent update of AD password?

I have a working Fedora 9 system that's set up to authenticate users via PAM -> krb5 -> Active Directory. I'm migrating this to Fedora 14, and everything works, but it's working too well :-) On ...
0
votes
1answer
1k views

Authentication failure of OpenVPN client against Active Directory

I'm getting the following error (client side) when connecting to my OpenVPN server: AUTH: Received AUTH_FAILED control message and on the server I get thefollowing error message in teh openvpn ...
0
votes
1answer
206 views

LikewiseOpen and pam_access

We have a combination of RHEL5 and SLES11 servers that integrate with Active Directory via LikewiseOpen. What I'm wondering is in what place should I put the pam rule to allow pam_access to be ...
6
votes
5answers
4k views

Linux authentication via ADS — allowing only specific groups in PAM

I'm taking the samba / winbind / PAM route to authenticate users on our linux servers from our Active Directory domain. Everything works, but I want to limit what AD groups are allowed to ...
4
votes
2answers
1k views

Linux with AD user accounts - what about root?

Once upon a time I set about getting a Linux server to use our Active Directory for logins, and I got it so that I could login as myself and then work on the server, and SU to root to make system ...
1
vote
2answers
2k views

Authenticate CVS users against Active Directory

I have a mixed Linux/Windows software development environment where the Linux clients are migrating to a system where they are able to authenticate against Active Directory. (That part I figured out) ...
16
votes
1answer
19k views
0
votes
1answer
94 views

Decoding PAM configuration files

Could someone point me to some (recent) documentation that would help me with decoding PAM configuration file lines like this: auth [success=2 default=ignore] pam_unix.so nullok_secure auth ...