[Bug 369575] Re: Why is /usr/share/pam-configs/krb5 specifying minimum_uid= ?

Russ Allbery rra at debian.org
Wed Mar 31 06:06:48 BST 2010


"Daniel Richard G." <skunk at iskunk.org> writes:

> No no, the goal is not to have Kerberos users with uid < 1000. It's to
> push minimum_uid higher, so that you can have normal 1000-something-uid
> local users authenticate without any Kerberos interaction. Same argument
> as for the root user and ignore_root.

Oh, sorry.  I forgot the context.  I even re-read the bug and missed
that.  Apologies.

> As for doing the upgrade, isn't pam-configs/krb5 a conffile? The user
> would see what's going on.

No, it's not a conffile.  The generated /etc/pam.d files are configuration
files, but if the user is using the defaults, I believe changes to the
defaults are just automatically applied (although Steve would know better
than I).  And krb5.conf normally isn't updated once written and I don't
think it could be updated with this particular type of change.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>

-- 
Why is /usr/share/pam-configs/krb5 specifying minimum_uid= ?
https://bugs.launchpad.net/bugs/369575
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to kerberos-configs in ubuntu.



More information about the Ubuntu-server-bugs mailing list