On Sat, 2016-11-26 at 13:19 +0000, ljkimmel99(a)hotmail.com wrote:
How would a newbie know what sorts of functions the various pam_sss
modules (auth/session/password/account) perform in order to decide how
to configure them in the PAM stack?
Arguably a newbie should not touch the PAM stack :-)
I've seen references on Fedorahosted and Red Hat sites but they
just
tell you exactly what to set by not why or what the modules are doing.
The man page for pam_sss also doesn't tell anything about the various
modules, only that they are available.
This is because what happens depends very much by the daemon
configuration and very little by the pam modules. The provided
configuration should not be modified by users.
Also, the directed configurations (e.g.
https://docs.fedoraproject.org/en-US/Fedora/18/html/System_Administrators...)
seem to differ slightly that what actually gets configured if one uses 'authconfig
--enablesssd --enablesssdauth --update'.
authconfig usually does the correct thing which may have changed since
the times of Fedora 18.
Simo.
--
Simo Sorce * Red Hat, Inc * New York