[SSSD] [PATCH] PAM: Add domains= option to pam_sss

Jan Pazdziora jpazdziora at redhat.com
Sat Aug 2 19:15:01 UTC 2014


On Tue, Jul 29, 2014 at 04:59:23PM +0200, Daniel Gollub wrote:
> 
> VPN service #1 is configured to use PAM configuration/service:
> /etc/pam.d/vpn-sales-dep.conf
> 
> Which consists of:
> {auth,account} ... pam_sss.so domains=emea.example.com,hq.example.com
> 
> VPN service #2 is ocnfigued to use PAM configuration/service:
> /etc/pam.d/vpn-it.conf
> 
> Which consists of:
> {auth,account} ... pam_sss.so domains=it.example.com

When the client using the PAM services vpn-sales-dep will want to
authenticate the user, will it be expected to call pam_start
with "login" or "login at emea.example.com"?

-- 
Jan Pazdziora | adelton at #ipa*, #brno
Principal Software Engineer, Identity Management Engineering, Red Hat



More information about the sssd-devel mailing list