------ /var/log/messages ---------
Oct 16 08:06:18 2x-dhcp-x-xxx-x login(pam_unix)[1657]: session opened for user john by (uid=0)
Oct 16 08:06:18 2x-dhcp-x-xxx-x -- john[1657]: LOGIN ON pts/2 BY john FROM 10.0.0.0
------- /etc/nsswitch.conf ---------- <snip> passwd: files ldap shadow: files ldap group: files ldap </snip>
------- /etc/pam.d/system-auth ------------ auth required /lib/security/$ISA/pam_env.so auth sufficient /lib/security/$ISA/pam_unix.so likeauth nullok auth sufficient /lib/security/$ISA/pam_ldap.so use_first_pass auth required /lib/security/$ISA/pam_deny.so
account required /lib/security/$ISA/pam_unix.so
account [default=bad success=ok user_unknown=ignore service_err=ignore system_err=ignore] /lib/security/$ISA/pam_ldap.so
password required /lib/security/$ISA/pam_cracklib.so retry=3 type= password sufficient /lib/security/$ISA/pam_unix.so nullok use_authtok password sufficient /lib/security/$ISA/pam_ldap.so use_authtok password required /lib/security/$ISA/pam_deny.so
session required /lib/security/$ISA/pam_limits.so session required /lib/security/$ISA/pam_unix.so session optional /lib/security/$ISA/pam_ldap.so
Another point I am confused on:
Is it mandatory that whoever logs in has a Linux account or can I somehow drop everyone that logs in into the same user (I want everyone to have the exact same priveleges and thought this would be easier than trying to control lists of users/groups).
Thank you, G.J.
_________________________________________________________________
Page a contact?s mobile phone with MSN Messenger 6.0. Download it now FREE! http://msnmessenger-download.com
_______________________________________________ Pam-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/pam-list
