Re: [Comm] OpenLDAP

["Alexey I. Froloff" <raorn@immo.ru>]

[-- Attachment #1: Type: text/plain, Size: 1173 bytes --]

* Taras Ablamsky <t@v-lug.vlink.ru> [031104 01:16]:
> t@lcomp2 ~ $ cat /etc/pam.d/system-auth              
> #%PAM-1.0
> auth    sufficient      /lib/security/pam_ldap.so
> auth    required        /lib/security/pam_tcb.so shadow fork prefix=$2a$ count=8 nullok use_first_pass
> account sufficient      /lib/security/pam_ldap.so
> account required        /lib/security/pam_tcb.so shadow fork
> password        required        /lib/security/pam_passwdqc.so min=disabled,24,12,8,7 max=40 passphrase=3 match=4 similar=deny random=42 enforce=users retry=3
> password        sufficient      /lib/security/pam_ldap.so use_authtok
> password        required        /lib/security/pam_tcb.so use_authtok shadow fork prefix=$2a$ count=8 write_to=tcb

Есть мнение, что сюда стОит добавить pam_mkhomedir (по аналогии с
system-auth-winbind)

> session required        /lib/security/pam_tcb.so
> session required        /lib/security/pam_limits.so


-- 
Regards, Sir Raorn.
-------------------
>  ps afux | grep <fakeuser> | grep -v grep | awk '{print $1;}' | uniq
Опять races.                     

Есть тут один способ как-то с этим бороться, kill -1 -9 называется.
		-- ldv in devel@

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]