From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <raorn@immo.ru>
Date: Tue, 4 Nov 2003 08:23:13 +0300
From: "Alexey I. Froloff" <raorn@immo.ru>
To: community@altlinux.ru
Subject: Re: [Comm] OpenLDAP
Message-ID: <20031104052313.GW6596@inferno.immo>
Mail-Followup-To: community@altlinux.ru
References: <200311031248.45973.dima@academy.cap.ru>
	<3FA6D0B8.4050505@v-lug.vlink.ru>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="RSEf6uBrYOgTgMHg"
Content-Disposition: inline
In-Reply-To: <3FA6D0B8.4050505@v-lug.vlink.ru>
User-Agent: Mutt/1.4.1i
X-Envelope-To: community@altlinux.ru
X-BeenThere: community@altlinux.ru
X-Mailman-Version: 2.1.3
Precedence: list
Reply-To: community@altlinux.ru
List-Id: <community.altlinux.ru>
List-Unsubscribe: <http://www.altlinux.ru/mailman/listinfo/community>,
	<mailto:community-request@altlinux.ru?subject=unsubscribe>
List-Archive: </pipermail/community>
List-Post: <mailto:community@altlinux.ru>
List-Help: <mailto:community-request@altlinux.ru?subject=help>
List-Subscribe: <http://www.altlinux.ru/mailman/listinfo/community>,
	<mailto:community-request@altlinux.ru?subject=subscribe>
X-List-Received-Date: Tue, 04 Nov 2003 05:23:14 -0000
Archived-At: <http://lore.altlinux.org/community/20031104052313.GW6596@inferno.immo/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>


--RSEf6uBrYOgTgMHg
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

* Taras Ablamsky <t@v-lug.vlink.ru> [031104 01:16]:
> t@lcomp2 ~ $ cat /etc/pam.d/system-auth              
> #%PAM-1.0
> auth    sufficient      /lib/security/pam_ldap.so
> auth    required        /lib/security/pam_tcb.so shadow fork prefix=$2a$ count=8 nullok use_first_pass
> account sufficient      /lib/security/pam_ldap.so
> account required        /lib/security/pam_tcb.so shadow fork
> password        required        /lib/security/pam_passwdqc.so min=disabled,24,12,8,7 max=40 passphrase=3 match=4 similar=deny random=42 enforce=users retry=3
> password        sufficient      /lib/security/pam_ldap.so use_authtok
> password        required        /lib/security/pam_tcb.so use_authtok shadow fork prefix=$2a$ count=8 write_to=tcb

Есть мнение, что сюда стОит добавить pam_mkhomedir (по аналогии с
system-auth-winbind)

> session required        /lib/security/pam_tcb.so
> session required        /lib/security/pam_limits.so


-- 
Regards, Sir Raorn.
-------------------
>  ps afux | grep <fakeuser> | grep -v grep | awk '{print $1;}' | uniq
Опять races.                     

Есть тут один способ как-то с этим бороться, kill -1 -9 называется.
		-- ldv in devel@

--RSEf6uBrYOgTgMHg
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/pzfBVqT7+fkT8woRAstzAJ9pfBesazk7mLfqNFeFyid/E5F7rgCfUrVL
NtrTxcKGr8fDKyWh2E/XgoM=
=fDfq
-----END PGP SIGNATURE-----

--RSEf6uBrYOgTgMHg--