how to install pam_krb5_migrate in RHEL/Fedora, NIS-->Kerberos authentication
Robert Kudyba <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.general |
|---|---|
| Message-ID | <CAFHi+KRyQxewcfD6qL7_h7hm4RKQeDgEhmRxkSMKdDFnSob7Gw@mail.gmail.com> |
We are trying to drop in Kerberos authentication in Fedora 32 for NIS. I have Kerberos working, H/T to https://docs.oracle.com/en/operating-systems/oracle-linux/7/userauth/ol7-auth.html#ol7-cfgkrb-auth. The man page for it at https://docs.oracle.com/cd/E23824_01/html/821-1474/pam-krb5-migrate-5.html#REFMAN5pam-krb5-migrate-5 applies to Solaris as they reference /etc/pam.auth and has an extra field in the PAM authentication stack, e.g. 'gdm', 'login' and 'k5migrate'. I've seen the previous discussions at https://www.mail-archive.com/[email protected]/msg15841.html and https://www.mail-archive.com/[email protected]/msg15534.html I see there are source packages albeit for Debian at https://www.samba.org/~jelmer/pam_krb5_migrate/. I used 'ar x' to extract the files from .deb and copied pam_krb5_migrate_mit.so to /usr/lib/security and made a sym link at /usr/lib64/security/pam_krb5_migrate.so.1. Got the following errors: /usr/lib64/security/pam_krb5_migrate.so.1): lib kadm5clnt_mit.so.11: cannot open shared object file: No such file or directory ourserver crond[52612]: PAM adding faulty module: /usr/lib64/security/pam_krb5_migrate.so.1 ourserver crond[52612]: PAM (crond) illegal module type: k5migrate ourserver crond[52612]: PAM pam_parse: expecting return value; [...auth] Is there a way to get this module for Fedora? ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos