Re: Bug#421310: ITP: pam-krb5-migrate -- PAM module for migrating to Kerberos

[Russ Allbery <rra@debian.org>]

Jelmer Vernooij <jelmer@A-Eskwadraat.nl> writes:

> Package: wnpp
> Severity: wishlist
> Owner: Jelmer Vernooij <jelmer@A-Eskwadraat.nl>

> * Package name    : pam-krb5-migrate
>   Version         : 0.0.05
>   Upstream Author : Steve Langasek <vorlon@debian.org>
>                     Jelmer Vernooij <jelmer@samba.org>
> * URL             : http://www.freshmeat.net/projects/pam_krb5_migrate
> * License         : GPL
>   Description     : PAM module for migrating to Kerberos

> pam_krb5_migrate is a stackable authentication module that takes a
> username and password from an earlier module in the stack and attempts
> to transparently add the user to a Kerberos realm using the Kerberos 5
> kadmin service. The module can be used to ease the administrative
> burdens of migrating a large installed userbase from pre-existing
> authentication methods to a Kerberos-based setup.

That's a very cool idea.

How does it handle the Kerberos administrative operations?  Is it shelling
out to kadmin, or did you find a better way to handle that?

-- 
Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>