Follow Techotopia on Twitter

On-line Guides
All Guides
eBook Store
iOS / Android
Linux for Beginners
Office Productivity
Linux Installation
Linux Security
Linux Utilities
Linux Virtualization
Linux Kernel
System/Network Admin
Programming
Scripting Languages
Development Tools
Web Development
GUI Toolkits/Desktop
Databases
Mail Systems
openSolaris
Eclipse Documentation
Techotopia.com
Virtuatopia.com
Answertopia.com

How To Guides
Virtualization
General System Admin
Linux Security
Linux Filesystems
Web Servers
Graphics & Desktop
PC Hardware
Windows
Problem Solutions
Privacy Policy

  




 

 

NOTE: CentOS Enterprise Linux 5 is built from the Red Hat Enterprise Linux source code. Other than logo and name changes CentOS Enterprise Linux 5 is compatible with the equivalent Red Hat version. This document applies equally to both Red Hat and CentOS Enterprise Linux 5.

25.2. Authentication

The Authentication tab allows for the configuration of network authentication methods. To enable an option, click the empty checkbox beside it. To disable an option, click the checkbox beside it to clear the checkbox.

Authentication

Figure 25.2. Authentication

The following explains what each option configures:

Kerberos

The Enable Kerberos Support option enables Kerberos authentication. Click the Configure Kerberos... button to open the Kerberos Settings dialogue and configure the following:

  • Realm — Configures the realm for the Kerberos server. The realm is the network that uses Kerberos, composed of one or more KDCs and a potentially large number of clients.

  • KDC — Defines the Key Distribution Center (KDC), which is the server that issues Kerberos tickets.

  • Admin Servers — Specifies the administration server(s) running kadmind.

The Kerberos Settings dialogue also allows you to use DNS to resolve hosts to realms and locate KDCs for realms.

The krb5-libs and krb5-workstation packages must be installed for this option to work. For more information about Kerberos, refer to Section 42.6, “Kerberos”.

LDAP

The Enable LDAP Support option instructs standard PAM-enabled applications to use LDAP for authentication. The Configure LDAP... button allows you to configure LDAP support with options identical to those present in Configure LDAP... under the User Information tab. For more information about these options, refer to Section 25.1, “User Information”.

The openldap-clients package must be installed for this option to work.

Smart Card

The Enable Smart Card Support option enables Smart Card authentication. This allows users to log in using a certificate and key associated stored on a smart card. Click the Configure Smart Card... button for more options.

The pam_pkcs11 and coolkey packages must be installed for this option to work. For more information about smart cards, refer to Section 42.3.1.3, “Supported Smart Cards” under Section 42.3, “Single Sign-on (SSO)”.

SMB

The Enable SMB Support option configures PAM to use a Server Message Block (SMB) server to authenticate users. SMB refers to a client-server protocol used for cross-system communication; it is also the protocol used by Samba to appear as a Windows server to Windows clients. Click the Configure SMB... button to specify the following:

  • Workgroup — Specifies the SMB workgroup to use.

  • Domain Controllers — Specifies the SMB domain controllers to use.

Winbind

The Enable Winbind Support option configures the system to connect to a Windows Active Directory or a Windows domain controller. User information from the specified directory or domain controller can then be accessed, and server authentication options can be configured.

The Configure Winbind... options are identical to those in the Configure Winbind... button on the User Information tab. Please refer to Winbind (under Section 25.1, “User Information”) for more information.


 
 
  Published under the terms of the GNU General Public License Design by Interspire