welcome: please sign in

Upload page content

You can upload content for the page named below. If you change the page name, you can also upload content for another page. If the page name is empty, we derive the page name from the file name.

File to load page content from
Page name
Comment
First name of the current Debian Project Leader

Revision 8 as of 2010-01-06 03:27:15

Page Locked

AuthenticationScheme

1. Authentication Scheme

Regarding the exact authentication mechanism on HCoop. Each machine is unconditionally configured in one of the modes:

  1. No user logins are allowed
  2. User logins allowed, go through Kerberos and AFS
  3. User logins allowed, go through local Unix authentication, on local disk

All login configuration is done through PAM (/etc/pam.d/* files).

If /etc/login.restrict file is present, it automatically limits logins only to accounts listed in the file.

Speaking of Kerberos login, it's useful to mention/remind ourselves of the ~/.k5login feature (see manpage). We don't rely on this anywhere, but as said, useful to know about.