1 $FreeBSD: src/lib/libpam/modules/pam_krb5/README,v 1.1.2.2 2001/07/29 18:57:30 markm Exp $
3 This is the README for pam_krb5, a PAM module which support Kerberos 5
6 This software is Copyright (c) 1999-2000 Frank Cusack.
9 See the COPYRIGHT file, included with this distribution, for copyright
10 and redistribution information.
19 This PAM module requires the MIT 1.1+ release of Kerberos, or the Cygnus
20 CNS distribution. It has not been tested against heimdal or any other
21 Kerberos distributions.
23 Unlike other PAM Kerberos 5 modules out there, this one does not
24 use any private Kerberos interfaces. Thus, you need only the
25 header files and libraries that are part of the Kerberos distribution.
30 This software has been tested against Solaris 2.6. It should compile
31 against Linux (distributions?) with minimal (if any) changes. Reports
32 of OS [in]compatibilities are welcomed.
34 dtlogin on Solaris doesn't support xrealm logins (probably a good thing).
36 III. PAM notes/open issues
39 When is pam_sm_setcred() ever called with flags other than PAM_ESTABLISH_CRED?
40 It would be fairly easy to support PAM_DELETE_CRED.
43 I believe this to be complete.
46 This is complete (both functions just return success).
49 When is pam_sm_chauthtok() ever called with flags other than
55 Simply change /etc/pam.conf to include this module. Make sure to include
56 the acct category whenever you use the auth category, or .k5login will
59 You probably want to make this module "sufficient", before your unix
65 Thanks to Naomaru Itoi <itoi@eecs.umich.edu>,
66 Curtis King <curtis.king@cul.ca>, and Derrick Brashear <shadow@dementia.org>,
67 all of whom have written and made available Kerberos 4/5 modules.
68 Although no code in this module is directly from these author's modules,
69 (except the get_user_info() routine in support.c; derived from whichever
70 of these authors originally wrote the first module the other 2 copied from),
71 it was extremely helpful to look over their code which aided in my design.