[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: display managers and kerberos5



On Sat, Sep 29, 2001 at 11:41:50AM +0200, Martin Maciaszek wrote:
> Is there some way to tell xdm/gdm/${WHATEVER}dm to authenticate against a 
> KDC and request a TGT on login?

   Hello Martin!

   What you need is PAM (Pluggable Authentication Module),
a layer between the application (in your case *dm) and the
underlying authentication system.

   Depending on the authentication[0] required, you use the
suitable module. PAM modules reside under /lib/security,
there's no kerberos module included in the libpam-modules
package but I'm sure you can find one (tip: search in freshmeat.net)

   For how to configure applications for authentication methods,
consult the files under /etc/pam.d 
   Further info can be found in pam.d man page and pam-doc package
(apt-get install pam-doc)


[0] PAM can also be used for authorization and/or accounting

rgds

-- 
Serafim Zanikolas                           Proud of running
http://www.it.teithe.gr/~serzan             Debian GNU/Linux

Attachment: pgptfqWjukIDh.pgp
Description: PGP signature


Reply to: