Re: Bug#421310: ITP: pam-krb5-migrate -- PAM module for migrating to Kerberos
On Fri, Apr 27, 2007 at 06:00:34PM -0700, Russ Allbery wrote:
> Jelmer Vernooij <jelmer@A-Eskwadraat.nl> writes:
> > Package: wnpp
> > Severity: wishlist
> > Owner: Jelmer Vernooij <jelmer@A-Eskwadraat.nl>
> > * Package name : pam-krb5-migrate
> > Version : 0.0.05
> > Upstream Author : Steve Langasek <vorlon@debian.org>
> > Jelmer Vernooij <jelmer@samba.org>
> > * URL : http://www.freshmeat.net/projects/pam_krb5_migrate
> > * License : GPL
> > Description : PAM module for migrating to Kerberos
>
> > pam_krb5_migrate is a stackable authentication module that takes a
> > username and password from an earlier module in the stack and attempts
> > to transparently add the user to a Kerberos realm using the Kerberos 5
> > kadmin service. The module can be used to ease the administrative
> > burdens of migrating a large installed userbase from pre-existing
> > authentication methods to a Kerberos-based setup.
> That's a very cool idea.
> How does it handle the Kerberos administrative operations? Is it shelling
> out to kadmin, or did you find a better way to handle that?
It links to libkadm5clnt. The code was written well before libkadm5 had a
suitable public API, so it hasn't been packaged before now because any
migrations I needed it for are long done. :)
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
vorlon@debian.org http://www.debian.org/
Reply to: