Re: Bug#421310: ITP: pam-krb5-migrate -- PAM module for migrating to Kerberos
Jelmer Vernooij <jelmer@A-Eskwadraat.nl> writes:
> Package: wnpp
> Severity: wishlist
> Owner: Jelmer Vernooij <jelmer@A-Eskwadraat.nl>
> * Package name : pam-krb5-migrate
> Version : 0.0.05
> Upstream Author : Steve Langasek <vorlon@debian.org>
> Jelmer Vernooij <jelmer@samba.org>
> * URL : http://www.freshmeat.net/projects/pam_krb5_migrate
> * License : GPL
> Description : PAM module for migrating to Kerberos
> pam_krb5_migrate is a stackable authentication module that takes a
> username and password from an earlier module in the stack and attempts
> to transparently add the user to a Kerberos realm using the Kerberos 5
> kadmin service. The module can be used to ease the administrative
> burdens of migrating a large installed userbase from pre-existing
> authentication methods to a Kerberos-based setup.
That's a very cool idea.
How does it handle the Kerberos administrative operations? Is it shelling
out to kadmin, or did you find a better way to handle that?
--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>
Reply to: