1 |
slords |
1.1 |
# |
2 |
|
|
# pam_winbind configuration file |
3 |
|
|
# |
4 |
|
|
# /etc/security/pam_winbind.conf |
5 |
|
|
# |
6 |
|
|
|
7 |
|
|
[global] |
8 |
|
|
|
9 |
|
|
# turn on debugging |
10 |
|
|
;debug = no |
11 |
|
|
|
12 |
|
|
# turn on extended PAM state debugging |
13 |
|
|
;debug_state = no |
14 |
|
|
|
15 |
|
|
# request a cached login if possible |
16 |
|
|
# (needs "winbind offline logon = yes" in smb.conf) |
17 |
|
|
;cached_login = no |
18 |
|
|
|
19 |
|
|
# authenticate using kerberos |
20 |
|
|
;krb5_auth = no |
21 |
|
|
|
22 |
|
|
# when using kerberos, request a "FILE" krb5 credential cache type |
23 |
|
|
# (leave empty to just do krb5 authentication but not have a ticket |
24 |
|
|
# afterwards) |
25 |
|
|
;krb5_ccache_type = |
26 |
|
|
|
27 |
|
|
# make successful authentication dependend on membership of one SID |
28 |
|
|
# (can also take a name) |
29 |
|
|
;require_membership_of = |
30 |
|
|
|
31 |
|
|
# password expiry warning period in days |
32 |
|
|
;warn_pwd_expire = 14 |
33 |
|
|
|
34 |
|
|
# omit pam conversations |
35 |
|
|
;silent = no |
36 |
|
|
|
37 |
|
|
# create homedirectory on the fly |
38 |
|
|
;mkhomedir = no |