forum.lissyara.su

Код: Выделить всё

# $FreeBSD: src/etc/pam.d/login,v 1.17 2007/06/10 18:57:20 yar Exp $
		#
		# PAM configuration for the "login" service
		#
		# auth
		#auth           sufficient      pam_self.so             no_warn
		#auth           include         system
		#account
		#account                requisite       /usr/lib/pam_securetty.so
		#account                required        /usr/lib/pam_nologin.so
		#account                include         system
		# session
		#session                include         system
		# password
		#password       include         system

		auth            required                pam_nologin.so                  no_warn
		auth            sufficient              /usr/local/lib/pam_winbind.so
		auth            sufficient              pam_opie.so                     no_warn no_fake_prompts
		auth            requisite               pam_opieaccess.so               no_warn allow_local
		auth            required                pam_unix.so                     no_warn try_first_pass
		account         sufficient              /usr/local/lib/pam_winbind.so
		account         required                pam_unix.so
		session         required                pam_permit.so

Код: Выделить всё

lissyara, 2006-11-21 в 9:24:44

В 6.1 не катит. Надо ставить из портов керберос - /usr/ports/security/heimdal
И конфиги примерно такие:

керберос:
[libdefaults]
   default_realm = DOMAIN-NAME
   clockskew = 300
   v4_instance_resolve = false
   v4_name_convert = {
       host = {
           rcmd = host
           ftp = ftp
       }
       plain = {
           something = something-else
       }
   }
[realms]
   DOMAIN-NAME = {
       ip-kontrollera-domena
       admin_server = ip-kontrollera-domena
   }
[domain_realm]
   .grand-prix = DOMAIN-NAME

Код: Выделить всё

powercharge# uname -a
FreeBSD powercharge.moskb.local 7.0-RELEASE-p4 FreeBSD 7.0-RELEASE-p4 #3: Thu Sep 18 12:17:45 UTC 2008     andy@powercharge.moskb.local:/usr/obj/usr/src/sys/MYKERN  i386
powercharge# more /etc/krb5.conf
[libdefaults]
default_realm = MOSKB.LOCAL
dns_lookup_kdc = yes
dns_lookup_realm = yes
kdc_timesync = yes


[domain_realm]
.moskb.local = MOSKB.LOCAL

[realms]
MOSKB.LOCAL = {
              kdc = dc2.moskb.local
              admin_server = dc2.moskb.local
              kpasswd_server = dc2.moskb.local
              default_domain = moskb.local
              }
[logging]
kdc = FILE:/var/log/kdc.log

powercharge# kl
kldconfig kldload   kldstat   kldunload kldxref   klist
powercharge# klist
Credentials cache: FILE:/tmp/krb5cc_0
        Principal: andy@MOSKB.LOCAL

  Issued           Expires        Principal
Sep  7 05:43:29  >>>Expired<<<  krbtgt/MOSKB.LOCAL@MOSKB.LOCAL
powercharge# kinit renew
renew@MOSKB.LOCAL's Password:
powercharge# kinit andy
andy@MOSKB.LOCAL's Password:
kinit: NOTICE: ticket renewable lifetime is 1 week
powercharge# pkg_info | grep hemdail
powercharge#

Код: Выделить всё

Compiling libsmb/clikrb5.c                                                                                                              
libsmb/clikrb5.c: In function 'krb5_set_real_time':                                                                                     
libsmb/clikrb5.c:132: error: dereferencing pointer to incomplete type                                                                   
libsmb/clikrb5.c:133: error: dereferencing pointer to incomplete type                                                                   
The following command failed:                                                                                                           
cc -I. -I/usr/ports/net/samba33/work/samba-3.3.9/source  -I/usr/ports/net/samba33/work/samba-3.3.9/source/iniparser/src -Iinclude -I./include  -I. -I. -I./lib/replace -I./lib/talloc -I./lib/tdb/include -I./libaddns -I./librpc -DHAVE_CONFIG_H  -I/usr/local/include -D_REENTRANT -D_THREAD_SAFE -I/usr/local/include/avahi-compat-libdns_sd/ -Iinclude -I./include -I. -I. -I./lib/replace -I./lib/talloc -I./lib/tdb/include -I./libaddns -I./librpc -I./popt -I/usr/local/include -DLDAP_DEPRECATED -O2 -fno-strict-aliasing -pipe -DLDAP_DEPRECATED -O -D_SAMBA_BUILD_=3    -I/usr/ports/net/samba33/work/samba-3.3.9/source/lib -D_SAMBA_BUILD_=3 -fPIC -DPIC -c libsmb/clikrb5.c -o libsmb/clikrb5.o                                                                                                                                   
gmake: *** [libsmb/clikrb5.o] Error 1                                                                                                   
*** Error code 1                                                                                                                        

Stop in /usr/ports/net/samba33.
*** Error code 1               

Stop in /usr/ports/net/samba33.

Код: Выделить всё

FreeBSD fw01.domain.biz 7.2-STABLE FreeBSD 7.2-STABLE #0: Thu Nov 12 21:15:11 MSK 2009     apostle@fw01.domain.biz:/usr/src/sys/i386/compile/domainKERN  i386

Код: Выделить всё

fw01# pkg_delete heimdal-1.0.1_1
pkg_delete: package 'heimdal-1.0.1_1' is required by these other packages
and may not be deinstalled:
amavisd-new-2.6.4_2,1
p5-DBD-Pg-2.15.1
p5-Mail-SpamAssassin-3.2.5_4
postgresql-client-8.2.13