movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-13 21:50:33 +03:00
Code Activity

* Support LDAP authentication.

Browse source 
* Factor out the common parts of the PAM config files.

svn path=/nixos/trunk/; revision=7694
This commit is contained in:
Eelco Dolstra 2007-01-16 13:30:59 +00:00
parent 554ae9908b
commit 07506308d6
10 changed files with 32 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

6
system/etc.nix
View file

@ -75,7 +75,7 @@ import ../helpers/make-etc.nix {
(program: (program:
{ source = pkgs.substituteAll { { source = pkgs.substituteAll {
src = ./etc/pam.d + ("/" + program); src = ./etc/pam.d + ("/" + program);
inherit (pkgs) pam_unix2; inherit (pkgs) pam_unix2 pam_ldap;
}; };
target = "pam.d/" + program; target = "pam.d/" + program;
} }
@ -88,6 +88,10 @@ import ../helpers/make-etc.nix {
"shadow" "shadow"
"sshd" "sshd"
"useradd" "useradd"
"common-auth"
"common-account"
"common-password"
"common-session"
] ]
); );
} }

2
system/etc/pam.d/common-account Normal file
View file

@ -0,0 +1,2 @@
account optional @pam_ldap@/lib/security/pam_ldap.so
account required @pam_unix2@/lib/security/pam_unix2.so

3
system/etc/pam.d/common-auth Normal file
View file

@ -0,0 +1,3 @@
auth sufficient @pam_ldap@/lib/security/pam_ldap.so
auth sufficient @pam_unix2@/lib/security/pam_unix2.so
auth required pam_deny.so

2
system/etc/pam.d/common-password Normal file
View file

@ -0,0 +1,2 @@
password sufficient @pam_ldap@/lib/security/pam_ldap.so
password sufficient @pam_unix2@/lib/security/pam_unix2.so nullok

2
system/etc/pam.d/common-session Normal file
View file

@ -0,0 +1,2 @@
auth optional @pam_ldap@/lib/security/pam_ldap.so
session required @pam_unix2@/lib/security/pam_unix2.so

8
system/etc/pam.d/login
View file

@ -1,4 +1,4 @@
auth required @pam_unix2@/lib/security/pam_unix2.so nullok auth include common-auth
account required @pam_unix2@/lib/security/pam_unix2.so account include common-account
password required @pam_unix2@/lib/security/pam_unix2.so nullok password include common-password
session required @pam_unix2@/lib/security/pam_unix2.so session include common-session

8
system/etc/pam.d/passwd
View file

@ -1,4 +1,4 @@
auth required @pam_unix2@/lib/security/pam_unix2.so auth include common-auth
account required @pam_unix2@/lib/security/pam_unix2.so account include common-account
password required @pam_unix2@/lib/security/pam_unix2.so nullok password include common-password
session required @pam_unix2@/lib/security/pam_unix2.so session include common-session

8
system/etc/pam.d/sshd
View file

@ -1,4 +1,4 @@
auth required @pam_unix2@/lib/security/pam_unix2.so auth include common-auth
account required @pam_unix2@/lib/security/pam_unix2.so account include common-account
password required @pam_unix2@/lib/security/pam_unix2.so nullok password include common-password
session required @pam_unix2@/lib/security/pam_unix2.so session include common-session

8
system/etc/pam.d/su
View file

@ -1,5 +1,5 @@
auth sufficient pam_rootok.so auth sufficient pam_rootok.so
auth required @pam_unix2@/lib/security/pam_unix2.so nullok auth include common-auth
account required @pam_unix2@/lib/security/pam_unix2.so account include common-account
password required @pam_unix2@/lib/security/pam_unix2.so nullok password include common-password
session required @pam_unix2@/lib/security/pam_unix2.so session include common-session

4
system/etc/profile.sh
View file

@ -17,8 +17,8 @@ fi
# Set up the per-user profile. # Set up the per-user profile.
NIX_USER_PROFILE_DIR=/nix/var/nix/profiles/per-user/$USER NIX_USER_PROFILE_DIR=/nix/var/nix/profiles/per-user/$USER
mkdir -m 0755 -p $NIX_USER_PROFILE_DIR mkdir -m 0755 -p $NIX_USER_PROFILE_DIR
if test "$(stat --printf '%U' $NIX_USER_PROFILE_DIR)" != "$USER"; then if test "$(stat --printf '%u' $NIX_USER_PROFILE_DIR)" != "$(id -u)"; then
echo "WARNING: bad ownership on $_NIX_PROFILE_DIR" >&2 echo "WARNING: bad ownership on $NIX_USER_PROFILE_DIR" >&2
fi fi
if ! test -L $HOME/.nix-profile; then if ! test -L $HOME/.nix-profile; then