From owner-FreeBSD-users-jp@jp.FreeBSD.org Thu Apr 16 12:24:04 2009
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) id n3G3O4D11292;
	Thu, 16 Apr 2009 12:24:04 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from vcs006.hs.kddi.ne.jp (vcs006.hs.kddi.ne.jp [211.134.181.237])
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) with SMTP/inet id n3G3O4R11287
	for <freebsd-users-jp@jp.freebsd.org>; Thu, 16 Apr 2009 12:24:04 +0900 (JST)
	(envelope-from nomura@ir-alt.co.jp)
Received: from unknown (HELO vmail02.hs.kddi.ne.jp) (211.134.181.86)
  by vcs006 with SMTP; 16 Apr 2009 12:23:58 +0900
Received: from [192.168.1.204] (really [221.255.123.106])
          by vmail02.hs.kddi.ne.jp with ESMTP
          id <20090416032358364.EPYT.4981.vmail02.hs.kddi.ne.jp@hs.kddi.ne.jp>
          for <FreeBSD-users-jp@jp.FreeBSD.org>;
          Thu, 16 Apr 2009 12:23:58 +0900
From: =?ISO-2022-JP?B?GyRCTG5CPBsoQg==?= <nomura@ir-alt.co.jp>
To: FreeBSD-users-jp@jp.FreeBSD.org
In-Reply-To: <20090414093642.GA85393@club.kyutech.ac.jp>
References: <20090413164900.4503.NOMURA@ir-alt.co.jp> <20090414093642.GA85393@club.kyutech.ac.jp>
Message-Id: <20090416121412.C413.NOMURA@ir-alt.co.jp>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-2022-JP"
Content-Transfer-Encoding: 7bit
X-Mailer: Becky! ver. 2.31 [ja]
Reply-To: FreeBSD-users-jp@jp.FreeBSD.org
Precedence: list
Date: Thu, 16 Apr 2009 12:23:58 +0900
X-Sequence: FreeBSD-users-jp 92245
Subject: [FreeBSD-users-jp 92245] Re: ldap =?ISO-2022-JP?B?GyRCJE4bKEI=?=
 =?ISO-2022-JP?B?GyRCRjNGfhsoQg==?= 
Sender: owner-FreeBSD-users-jp@jp.FreeBSD.org
X-Originator: nomura@ir-alt.co.jp
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+060209

$BLnB<$H?=$7$^$9!#(B

$BIaDL$N%m%0%$%s$O!"%3%s%=!<%k$N%W%m%s%W%H$+$i%m%0%$%s$9$k>l9g$G$9!#(B
ssh$B$G$O(B ssh test3@hoge.co.jp $B$H$7$F%m%0%$%s$7$h$&$H$7$F$*$j$^$9!#(B

$BN>J}$H$b(Bpasswd$B$rJ9$$$F$/$k$N$G$9$,!"@5$7$$%Q%9%o!<%I$rF~NO$7$F$b%m%0%$%s$5(B
$B$;$F$/$l$^$;$s!#(Bsystem$B$rJT=8$7$F$+$i(Bsu$B$G$O$&$^$/$$$/$h$&$K$J$j$^$7$?!#B>$K(B
$B$b$J$K$+JT=8$9$Y$-$b$N$,$"$k$N$G$7$g$&$+!)(B

/pam.d/ssh$B$O2<5-$N$h$&$K$J$C$F$*$j$^$9!#(B

# auth
auth            sufficient      pam_opie.so             no_warn no_fake_prompts
auth            requisite       pam_opieaccess.so       no_warn allow_local
#auth           sufficient      pam_krb5.so             no_warn try_first_pass
#auth           sufficient      pam_ssh.so              no_warn try_first_pass
auth            required        pam_unix.so             no_warn try_first_pass
auth            sufficient      /usr/local/lib/pam_ldap.so      try_first_pass

# account
account         required        pam_nologin.so
#account        required        pam_krb5.so
account         required        pam_login_access.so
account         required        pam_unix.so

# session
#session        optional        pam_ssh.so
session         required        pam_permit.so

# password
#password       sufficient      pam_krb5.so             no_warn try_first_pass
password        required        pam_unix.so             no_warn try_first_pass

$B$h$m$7$/$*4j$$$7$^$9!#(B

On Tue, 14 Apr 2009 18:36:43 +0900
Kouichiro Iwao <meta@club.kyutech.ac.jp> wrote:

> $B4dCK$G$9!#(B
> 
> On Mon, Apr 13, 2009 at 05:02:22PM +0900, $BLnB<(B wrote:
> > system$B$N$[$&$K!"(B
> > auth            sufficient      /usr/local/lib/pam_ldap.so      try_first_pass
> > $B$r2C$($F$d$C$?$i!"$&$^$/$$$-$^$7$?!*!J(Bsu$B$N$[$&$K$O4{$KDI2C$7$F$"$j$^$7$?!#!K(B
> > 
> > $B$"$j$,$H$&$4$6$$$^$9!#(B
> > 
> > pam$B$,$h$/$o$+$C$F$J$$$_$?$$$J$N$G!">/$7JY6/$7$^$9!#(B(ssh$B$d!"IaDL$N%m%0%$(B
> > $B%s$G$^$@$R$C$+$+$C$F$*$j$^$9!#(B)
> 
> PAM$B$G%m%0%$%s$7$h$&$H$7$F$$$k$N$J$i(B ssh $B$N>l9g!"(B/etc/pam.d/sshd
> $B$rF1MM$KJT=8$9$l$PBg>fIW$@$H;W$$$^$9$,!#$&$A$N4D6-$G$OLdBj$"$j$^$;$s!#(B
> 
> $BIaDL$N%m%0%$%s$H$O2?$,IaDL$J$N$G$7$g$&$+!#(B
> -- 
> $B6e=#9)6HBg3X(B $B3X@8<+<#%M%C%H%o!<%/0Q0w2q(B
> $B4dCK(B $Bb+0lO/(B <meta@club.kyutech.ac.jp>
> __________ NOD32 4012 (20090416) $B>pJs(B __________
> 
> $B$3$N%a!<%k$O(BNOD32$B$K$h$C$F8!:::Q$_$G$9!#(B
> http://canon-sol.jp
> 

--------------------------------------------------------------------- 
gpg public key
https://hagi.ir-alt.co.jp/home/nomura/public-nomura.asc

$BLnB<(B <nomura@ir-alt.co.jp>
---------------------------------------------------------------------

