Arch Linux

snk

Member

Registered: 2010-07-30

Posts: 5

Arch, LDAP, Kerberos, OS X Server

Does anyone have any experience adding an Arch linux client to a Mac OpenDirectory (openLDAP/Kerberos) network?

I've found this: http://wiki.archlinux.org/index.php/HOW … entication

But it seems to focus on using LDAP for authentication, rather than Kerberos.

I've installed Kerberos and openldap, and configured it as close as possible to our RedHat machines, but I don't seem to be getting anywhere. Can anyone shed some light?

zenlord

Member

From: Belgium

Registered: 2006-05-24

Posts: 1,229

Website

Re: Arch, LDAP, Kerberos, OS X Server

I'm also interested in this: My office is just down the stairs for me, my personal laptop is Arch and my company's network is LDAP/Kerberos on Debian...

I have not found the time to actually start tinkering with it, but I have found these resources:
- http://www.linuxjournal.com/article/8374 (parts I to IV)
- http://www.freesoftwaremagazine.com/poster/31113 (3 bottom articles form a series)

Admittedly, they are not Archlinux-specific, but they might give you some pointers where you went wrong...

HTH.

snk

Member

Registered: 2010-07-30

Posts: 5

Re: Arch, LDAP, Kerberos, OS X Server

Thanks for those links, zenlord!

I found this one particularly helpful: http://www.freesoftwaremagazine.com/col … final_bits

The part I was getting stuck on was adding the relevant pam_krb5.so bits to the PAM stack.

So, adding the following to /etc/pam.d/login allowed console logins (after properly configuring /etc/nss_ldap.conf and /etc/openldap/ldap.conf, of course, which I apparently had already done):

account  sufficient pam_krb5.so ignore_root
auth     sufficient pam_krb5.so ignore_root
password required   pam_krb5.so ignore_root
session  optional   pam_krb5.so ignore_root

Cheers.