From ee762f9b709224a7dc7460fc535ee992045168b8 Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Sat, 4 Apr 2009 12:21:18 -0400 Subject: Split modules types in Identity and Authenticator The same module may implement both types, but initializatrion will be nonetheless performed separately, once for the identity module and once for the authenticator module. Also change the proxy module to retireve the pam target name from the domain configuration so that it is possibile to create per-domain pam stacks. With this modification it is actually possibile to use normal nss and pam modules to perform a successful authentication (tested only with sudo so far) Update exmples. --- server/examples/sssdproxytest | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 server/examples/sssdproxytest (limited to 'server/examples/sssdproxytest') diff --git a/server/examples/sssdproxytest b/server/examples/sssdproxytest new file mode 100644 index 00000000..9c5cb4ad --- /dev/null +++ b/server/examples/sssdproxytest @@ -0,0 +1,9 @@ +#%PAM-1.0 +auth sufficient pam_ldap.so debug +auth requisite pam_succeed_if.so uid >= 1000 quiet +auth required pam_deny.so + +account required pam_ldap.so debug +account sufficient pam_succeed_if.so uid < 1000 quiet +account required pam_permit.so + -- cgit