Re: [SSSD-users] SSSD + PAM configuration

2014-03-22 Thread Michael Ströder
Stephen Gallagher wrote: > For the record, root (and UID/GID zero) is special-cased in SSSD. You > *cannot* log in as root through SSSD. (The reasoning is that if SSSD > was broken, you wouldn't be able to get into the system at all to fix it). And there are myriads of security issues with putting

Re: [SSSD-users] SSSD + PAM configuration

2014-03-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/21/2014 12:40 PM, kevin sullivan wrote: > Thanks for the input Dmitri! > >> It is up to you where you draw the line between local accounts >> and central accounts but moving everything including root seems >> to me to be too much. > I agree that

Re: [SSSD-users] SSSD + PAM configuration

2014-03-21 Thread kevin sullivan
Thanks for the input Dmitri! >It is up to you where you draw the line between local accounts and central accounts but moving everything including root seems to me to be too much. I agree that it might be too much, however, it is something that I felt needed investigation. Thanks again, Kevin O

Re: [SSSD-users] SSSD + PAM configuration

2014-03-21 Thread Dmitri Pal
On 03/20/2014 07:14 PM, kevin sullivan wrote: Lukas, Thanks for your input. I can't reproduce what I was seeing right now, so I can't send you my log files because I deleted them earlier to make issues easier to find (which in retrospect was dumb). But just to explain what I was talking about

Re: [SSSD-users] SSSD + PAM configuration

2014-03-21 Thread Sumit Bose
On Thu, Mar 20, 2014 at 07:14:36PM -0400, kevin sullivan wrote: > Lukas, > > Thanks for your input. I can't reproduce what I was seeing right now, so I > can't send you my log files because I deleted them earlier to make issues > easier to find (which in retrospect was dumb). But just to explain w

Re: [SSSD-users] SSSD + PAM configuration

2014-03-20 Thread kevin sullivan
Lukas, Thanks for your input. I can't reproduce what I was seeing right now, so I can't send you my log files because I deleted them earlier to make issues easier to find (which in retrospect was dumb). But just to explain what I was talking about earlier, below are some more explanations. >Do us

Re: [SSSD-users] SSSD + PAM configuration

2014-03-18 Thread Lukas Slebodnik
On (18/03/14 17:42), kevin sullivan wrote: >Lukas, > >Thank you for your quick response. > >>You can use authconfig to configure pam-stack and nsswitch on CentOS/Fedora >> >>This is part of my /etc/pam.d/password-auth >>-- >>auth

Re: [SSSD-users] SSSD + PAM configuration

2014-03-18 Thread kevin sullivan
Lukas, Thank you for your quick response. >You can use authconfig to configure pam-stack and nsswitch on CentOS/Fedora > >This is part of my /etc/pam.d/password-auth >-- >authrequired pam_env.so >authsufficie

Re: [SSSD-users] SSSD + PAM configuration

2014-03-18 Thread Lukas Slebodnik
On (18/03/14 15:35), kevin sullivan wrote: >After trying for several days, I want to ask if this is even possible: > >I am running CentOS 6.4 and I have sssd-1.9.2-82 installed. I would like to I would recommend to update to CentOS 6.5 (lot of crashes and bugs were fixed in 6.5) >log into my machi

[SSSD-users] SSSD + PAM configuration

2014-03-18 Thread kevin sullivan
After trying for several days, I want to ask if this is even possible: I am running CentOS 6.4 and I have sssd-1.9.2-82 installed. I would like to log into my machine by querying an OpenLDAP server running else where. The big difference that I have from the normal sssd setup, is I only want to use