On Tue, Jul 29, 2014 at 04:59:23PM +0200, Daniel Gollub wrote:
VPN service #1 is configured to use PAM configuration/service:
/etc/pam.d/vpn-sales-dep.conf
Which consists of:
{auth,account} ... pam_sss.so
domains=emea.example.com,hq.example.com
VPN service #2 is ocnfigued to use PAM configuration/service:
/etc/pam.d/vpn-it.conf
Which consists of:
{auth,account} ... pam_sss.so
domains=it.example.com
When the client using the PAM services vpn-sales-dep will want to
authenticate the user, will it be expected to call pam_start
with "login" or "login(a)emea.example.com"?
--
Jan Pazdziora | adelton at #ipa*, #brno
Principal Software Engineer, Identity Management Engineering, Red Hat