Hey Brian I think that having an option to fall through the factors (like PAM) would do it. As far as I can tell, the current behavior is to match usernames that match certain regexes to specific password mechanisms, and that usernames are only tried against their matching password mechanism. I guess I'm asking for a switch that would try a username against all password mechanisms until it found one that match, returning a failure if none did.
Liam Quoting Brian Awood <[email protected]>: > Hi Liam, I'm not certain about this, I'd have to look into the cosign > internals more closely, but it's my understanding that the factors > are options > that mod_cosign can request. I'm wondering if what you are looking for a PAM > like behavior for the password check? > > -Brian > > On Tuesday 01 March 2011 10:34:45 Liam Hoekenga wrote: >> Looking at the the conf section in the wiki.. >> >> http://webapps.itcs.umich.edu/cosign/index.php/Cosign_Wiki:Test_install_HOW >> TO#CoSign_configuration >> >> It looks like it's possible to define additional primary factors. >> >> factor /usr/lib/cosign/factor/ldap login password >> >> It's not working for me, though. Rather than trying my additional >> factor, it's getting caught by the default "passwd" configuration, e.g. >> >> passwd kerberos ([^@]+) $1 EXAMPLE.EDU >> >> Is it possible to have multiple primary factors with overlapping >> username namespace? Ideally, I'd like to see cosign try all of the >> primary factors, stopping when it finds one that works. >> >> Liam >> >> --------------------------------------------------------------------------- >> --- Free Software Download: Index, Search & Analyze Logs and other IT data >> in Real-Time with Splunk. Collect, index and harness all the fast moving >> IT data generated by your applications, servers and devices whether >> physical, virtual or in the cloud. Deliver compliance at lower cost and >> gain new business insights. http://p.sf.net/sfu/splunk-dev2dev >> _______________________________________________ >> Cosign-discuss mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/cosign-discuss >> > > ------------------------------------------------------------------------------ > Free Software Download: Index, Search & Analyze Logs and other IT data in > Real-Time with Splunk. Collect, index and harness all the fast moving IT data > generated by your applications, servers and devices whether physical, virtual > or in the cloud. Deliver compliance at lower cost and gain new business > insights. http://p.sf.net/sfu/splunk-dev2dev > _______________________________________________ > Cosign-discuss mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/cosign-discuss > > !DSPAM:4d6fb30328791804284693! > > > > ------------------------------------------------------------------------------ Free Software Download: Index, Search & Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev _______________________________________________ Cosign-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/cosign-discuss
