/usr/share/doc/libpam-krb5-migrate-heimdal/README is in libpam-krb5-migrate-heimdal 0.0.11-5.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 | pam_krb5_migrate is a stackable authentication module that takes a username
and password from an earlier module in the stack, and attempts to
transparently add them to a Kerberos realm using the Kerberos 5 kadmin
service.
The module can be used to ease the administrative burdens of migrating a
large installed userbase from pre-existing authentication methods to a
Kerberos-based setup.
The most current version of this module can always be found at
http://samba.org/~jelmer/pam_krb5_migrate
For sample usage in a module stack, see the enclosed login.pam file.
The following options are recognized by the module:
debug turn debug logging on
keytab=<file> use alternate keytab for authentication
(default is /etc/security/pam_krb5.keytab)
min_uid=<uid> don't add principals for uid's lower than <uid>.
(default is 100)
principal=<name> use the key for <name> instead of the default
pam_migrate/<hostname> key
realm=<REALM> update the database for a realm other than the
default realm.
pam_krb5_migrate was written by Steve Langasek <vorlon@netexpress.net>.
Please send questions and comments (and especially bugfixes) to the current
maintainer, Jelmer Vernooij <jelmer@samba.org>.
|