similar to: authentication loosely tied to active directory?

Is there a way to coax java services running under tomcat to use the system authentication methods set up through PAM? In my case, this would be users in the local passwd file or through smb to a windows domain. I've added mod_auth_pam to get this effect with apache but would like to also handle java web services. -- Les Mikesell lesmikesell at gmail.com

I have some services on Centos5 boxes that use smb authentication against the Windows domain as a low-maintenance way to handle most of our office users for things that don't need home directories (web/file shares, etc.). Running authconfig is all it takes to add it to PAM, then adding mod_auth_pam to apache makes it work with that and local users. This all works without any particular

Setting up a new backuppc for a small group of device and I am running centos 5.4 with winbind setup and working. Everything is working and I would like the users to authenicate using their AD creds and was wondering what folks are using to do that with apache 2.2 and centos 5.4. I know about mod_auth_pam but that seems pretty dead so I was just wondering what folks were using and whats the

Can someone explain the changes in the system PAM setup for Centos5 vs. earlier verions? I have servers configured to use SMB authentication against a Windows domain controller so I don't have to deal with separate passwords. That still works the same for users that actually have local accounts. However, on some machines I also build the mod_auth_pam module for apache and use an

Hello, I have a small (medium?) sized network of about 30 XP machines. About 2/3 of these machines are running Home Ed. while the other 1/3 are running Professional Ed. I currently have two samba shares, and I'm using 'user' security. I want to implement single sign on, some way, somehow. I've considered: NIS and LDAP, but I can't get the NIS pGina plugin to

Finally got winbind to work, thanks for all the help. I wonder if it is normal for winbind to take approximately 20 seconds to authenticate a user? In smb.conf I have specified the names of all NT BDCs and PCD but it didn't change performance. And in pam.d/samba I have only auth and account required pam_winbind.so One more thing, does anybody have any hints on how to have Apache authenticate

Hello all, SLES9 Apache 2.0.54 Samba 3.0.9-2.6-SUSE PAM 0.77 I have been using Linux for a while on the side, and am now taking advantage of my position to try to implement a test server. I am the technical product and network lead in my department with a higher MIS group that dictates global network access. They do not want to change any of the existing ADS network to accomodate my small

Dear all, I guess there were a lot of posts about this subject, but Im really stuck & prefer start a new thread hoping that some of you won't mind re-posting to help the Samba NewBie that I am. well, here is my situation: - more than 1000 users on a hetegenous network, One Domain & the need to keep only one. - I need my Linux Boxes' users to get authenticated against a single

So I was googling around about this over the last week and here is what I found: nis/yp is for some reason bad. Kerbos is holy, but no how-to's that don't involve windows and active directory. What is the recommended sso approach for centos? Where are there examples / docs to follow? Jason -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- -

Hi, I have exactly the same problem with my web server ... Linux/redhat 9.0 / kernel 2.4.20-20.9.1 (+ Acl patches) Samba 3.0.2a / compiles with winbind and Acl options Apache 2.0.40 / with mod_auth_pam 2.xx included Authentication to samba share from a windows workstation using Acl + winbind + "Nt domain groups" works fine. But I gave some problems when I want to use NT domain

> -----Original Message----- > From: Brian J. Murrell [mailto:brian@interlinx.bc.ca] > > - Single Sign-On via Kerberos > > OK. Actually I understood this feature. I am just wondering how it > applies in an MS network. SSO to all of what? If my DCs are my > file/printer server(s) (let's say I mirror the data contents > of my PDC to > my BDC as well --

We would like to have our Apache Linux-based web server use our existing NT domain to authenticate some of our web pages. We are using the Apache module mod_auth_pam to use pam-based authentication and then the winbind pam module to do the actual authentication. We have gotten to the point where we can authenticate using NT _users_, but we have not been able to authenticate using _groups_. For

All; My Google foo is failing me, and searching through the last 10 months on this mailing list hasn't helped either. We have an existing Active Directory domain set up, and I'd like to add a CentOS 8 Workstation to it. I have experience using both realmd and manual configuration to allow local login with AD accounts to various Linux distribution, and have this working on my test

Hi all, I have a running Samba4 Server. I am able to authenticate Windows and Linux Clients very. (1) I want to use samba4 as SSO. In this regard my next step is to authenticate our web site users from samba4 server. In this web site, at home page our corporate users give their e-mail address username at companydomain.com and password (not e-mail password). (2) Our E-mail server is hosted on

We have a working samba file server using winbind to authenticate with a Win2003 server in native mode. [2008/05/10 18:22:54, 5] nsswitch/winbindd_cm.c:set_dc_type_and_flags(1651) set_dc_type_and_flags: domain STARTREK is in native mode. [2008/05/10 18:22:54, 5] nsswitch/winbindd_cm.c:set_dc_type_and_flags(1654) set_dc_type_and_flags: domain STARTREK is running active directory. I now want to

On 12/10/15 08:27, VigneshDhanraj G wrote: > Hi Rowland, > > Thanks for the help. > > Yes, Joined to the domain, ftp uses pam authentication. After > upgrading samba i found ftp pam authentication not working > > /etc/pam.d/ftp contains > > #%PAM-1.0 > auth sufficient /lib/security/pam_smbpass.so > auth sufficient /lib/security/pam_winbind.so

OK, I'm certain that this topic has been beat to death, but I need some assistance. I am trying to migrate to a SSO for the majority of our workstations and servers within our organization. I am currently trying to integrate a Gentoo Linux workstation to authenticate to the AD server. Once I get the process nailed down, I'll be moving on to bigger and better things... Prior to

Alon, On 12/18/2018 06:52 PM, Alon Bar-Lev wrote: > OK... So you have an issue... > > First, you need to delegate your smartcard to remote machine, probably > using unix socket redirection managed by openssh. This can be done in > many levels... > 1. Delegate USB device, this will enable only exclusive usage of the > smartcard by remote machine. > 2. Delegate PC/SC, this

I've got a new CentOS 7 server going into a remote location. I have local servers that authenticate against Active Directory (2012 if it matters) using winbindd. I'd like to have some method of using AD on the remote server, but I need to be able to access it if the network path to the AD servers is down. sssd caching won't do AFAIK (since that's just a cache that times out).

Hi all, I'm working on a replacement for a legacy linux mail server: courier POP/IMAP, Postfix, OpenLDAP. One of the requirements of the new mail server is to authenticate against our AD infrastructure (I'll still keep a userdb in OpenLDAP). SSO is not required since most of the clients don't log into our domain. The current system has about 1,000 concurrent users on it during