RE: centralize passwords
Hi folks
I'm trying to authenticate squid against a win2k server. as w2k supports
kerberos v5 i'd like to use PAM with the krb5 module. the problem is that i
didn't find any usefull documentation about pam_krb5 configuration
parameters. does anybody know about a howto which describes interoperation
between pam_krb5 and w2k?
thanks in advance
marc
> -----Original Message-----
> From: Alex Borges [mailto:alex@co.com.mx]
> Sent: Mittwoch, 26. Juni 2002 22:19
> To: Erick Lopez Carreon
> Cc: debian-firewall@lists.debian.org; debian-isp@lists.debian.org
> Subject: Re: centralize passwords
>
>
> El mié, 26-06-2002 a las 13:20, Erick Lopez Carreon escribió:
> > Hello:
> >
> > I am looking for the best way to centralize passwords
> > of my network, I need:
> >
> > - To centralize the access to the maquinas nix of the
> > network, I have read something of NIS and of PAM to
> > use shadow this I call passwords to him of the system
> Erick:
> Do i know u??? Well neways...
> NIS was designed for this but does have some shortcommings...id use it
> though.... Also, if its a simple need you can use webmin's "cluster"
> capability which allows you to (asynchronically) synchronize [heh]
> passwd files between servers.
>
>
> >
> > - That the passwords of the users win of the server
> > samba are sincronizen better with those of smbpasswd
> > and even with those of shadow
> Yeah....as far as i can tell you can do this too....check the samba
> howtos included in woody's samba/samba-doc packages
> >
> > - That squid autentifique and that the pairs
> > usuario/password are sincronizen or are the same ones
> > of the system, since normally a user with a mail
> > account also has access to the Internet at the moment
> > use authentication NCSA
> No problem.....squid authentificates against practically everything
> known to man.... specially, if youve syncronized to samba, you can use
> the smb_auth auth module which ive used extensively.
>
> Also, you can centralize most of what you say to a mysql
> backend by pam
> and have everything auth there....not to mention (because i dont know
> squat about them) the ldap posibilities....you chose three (smb,passwd
> and squid) very well supported thingies if you need flexibility in
> password storage/auth.
> >
> >
> > Some idea?
> >
> > Thanks in advance.
> >
> > =====
> > Erick Ivaan Lopez Carreon
> > CuahutliMexica
> > Ing. en Electronica
> > Soñador aficionado.
> > www.fsl.org.mx
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! - Official partner of 2002 FIFA World Cup
> > http://fifaworldcup.yahoo.com
> >
> >
> > --
> > To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
> > with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
> >
>
>
>
> --
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
--
To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: