RE: [MLUG] PAM Questions

["McNutt, Justin M." <EMAIL:PROTECTED>]

PAM works very well, but it takes a while to really grok how all the pieces
fit together.  I have had a lot of success with it, although not with
Apache.

Apache's mod_auth_pam requires that anyone authenticating via PAM has a
local account.  I have used this and mod_auth_kerb, which allows you to
authenticate to a remote Kerberos server directly, but *doesn't* require
that every user has a local account (much betta).

But in general, I like PAM.  PAM is good.  Make sure you don't lock out root
access from the console!  :-)

--J

> -----Original Message-----
> From: Jason McIntosh [mailto:EMAIL:PROTECTED]
> Sent: Monday, January 14, 2002 10:30 AM
> To: mlug
> Subject: [MLUG] PAM Questions
> 
> 
> I am looking at trying to set up PAM (just to play around 
> with it), and
> wanted to get peoples thoughts/opinions/ideas about PAM, from both a
> security standpoint, implementation, maintenance, etc.  I also needed
> some information on what to do to set up PAM on a linux box 
> (and NT, if
> that would even be possible).  An example, allow Linux Box A to
> authenticate against Linux Server B, using PAM.
> The other side of that, is questions on how Apache works with PAM, and
> related authentication.
> Thanks!
> Jason
> 
> 
> --
> To unsubscribe, go to http://mlug.missouri.edu/members/edit.php
> 
> Archives are available at http://mlug.missouri.edu/list-archives/
> 
--
To unsubscribe, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/