Hi Sam,
On 2021/11/12 19:31, Sam Morris via FreeIPA-users wrote:
> I have one more question. Is there any knowledge about PAM
configuration of Debian/Ubuntu
for this?
On a Debian (& Ubuntu, etc) system, the contents of /etc/pam.d/sudo will look a
little different but the concepts are the same.
Installing libpam-sss (which would be pulled in by freeipa-client) should set up
/etc/pam.d/common-{auth,account} to check against sssd. And these files are included by
/etc/pam.d/sudo.
So from the administrator's point of view, just create HBAC rules and sudo rules and
it should all work the same way.
Thanks! I try to config my PAM.
Best Regards,