Re: LDAP authentication with PAM

[Turbo Fredriksson <turbo@bayour.com>]

>>>>> "Brian" == Brian May <bam@debian.org> writes:

    Brian> pam_filter
    Brian> objectclass=posixAccount)(|(trustmodel=fullaccess)(accessto=hostname.domainname.com)

    Brian> but this line seems to require anonymous access to
    Brian> trustmodel and accessto in order to work. Is there a
    Brian> mistake somewhere here? Or have I missed something?  --
    Brian> Brian May <bam@debian.org>

That might be mistake. I'm no longer using pam_ldap. I have all my passwords in
Kerberos, so I'm using pam_krb5 instead...


-- 
 Turbo     __ _     Debian GNU     Unix _IS_ user friendly - it's just 
 ^^^^^    / /(_)_ __  _   ___  __  selective about who its friends are 
         / / | | '_ \| | | \ \/ /   Debian Certified Linux Developer  
  _ /// / /__| | | | | |_| |>  <  Turbo Fredriksson   turbo@tripnet.se
  \\\/  \____/_|_| |_|\__,_/_/\_\ Stockholm/Sweden

Albanian Iran South Africa supercomputer Serbian critical Treasury
North Korea congress Peking bomb FSF Mossad Ft. Meade Waco, Texas
[See http://www.aclu.org/echelonwatch/index.html for more about this]