topic Re: Linux PAM and LDAP in Operating System - Linux

Linux PAM and LDAP

Sriram Rajan — Wed, 03 Sep 2003 02:19:54 GMT

I am running several Redhat 9.0 Linux workstations that run OPENLDAP clients. I don't want local root to be able to change other user passwords. Also I want the old password be prompted before a user is allowed to change his password.

I am playing with PAM but haven't had any succees. Mainly because I don't understand PAM well enough.

Any ideas ?

Many thanks for your time.

Sriram

Re: Linux PAM and LDAP

Steven E. Protter — Wed, 03 Sep 2003 02:47:52 GMT

Your best bet would be an NIS configuration. Then the user passwords would be controlled by the NIS master server.

Its somewhat complex but it can be done.

Making one of the Linux boxes an LDAP server might be a better way to go. You want central control and either suggestion can do it.

SEP

Re: Linux PAM and LDAP

Jerome Henry — Wed, 03 Sep 2003 05:37:29 GMT

Hello,

Sure that LDAP server would be a good and not that hard way to go. ead Red hat advises on that at :
http://www.europe.redhat.com/documentation/rhl9/rhl-rg-en-9/ch-ldap.php3

They also have a few pages on pam. Maybe could your ead them too and let us know what exactly doesn't work on setting it up :
http://www.europe.redhat.com/documentation/rhl9/rhl-rg-en-9/ch-pam.php3
http://www.bb-zone.com/SLGFG/chapter25.html

J

Re: Linux PAM and LDAP

Vitaly Karasik_1 — Wed, 03 Sep 2003 07:31:13 GMT

see LJ articles :

http://www.linuxjournal.com/article.php?sid=6936

Regards,
Vitaly