[cvsnt] Re: Can I use pserver on Linux and authenticate to Windowsdomain?

Tim Carlson tim.carlson at pnl.gov
Thu Mar 18 20:04:47 GMT 2004


On Thu, 18 Mar 2004, Torsten Martinsen wrote:

> Tony Hoyle wrote:
>
> > Tim Carlson wrote:
> >
> >> Is there anyway I can tell the pserver to authenticate against AD
> >> instead
> >> of the local password file?  Or do I need to use some different
> >> mechanism?
> >
> >
> > It PAM is enabled then it will work the same way as for standard
> > logins.  Create
> > an /etc/pam.d/cvs file with the PAM setup you used to authenticate
> > with the active
> > directory.
>
> FWIW, I have a similar setup working. I have added PAM entries so that
> PAM allows authenticating through the winbind daemon. Winbind is part of
> Samba and allows authenticating against an Active Directory server. So
> the first step is to get winbind working, see e.g.
> http://www.samba.org/samba/docs/man/winbind.html.

I solved this by using a kerberos PAM stack to authenticate against the AD
domain. No samba involved.

I have multiple repositories and I've decided to use UNIX file permissions
to limit access. Not exactly the solution I wanted but it will work.

Thanks

Tim Carlson
Voice: (509) 376 3423
Email: Tim.Carlson at pnl.gov
EMSL UNIX System Support




More information about the cvsnt mailing list