Feature Request: PAM authentication

Question

Feature Request: PAM authentication

SirIntellegence opened this issue 3 years ago · comments

My Linux server currently has the capability to allow users to log in as a windows domain user (in case it matters, using https://www.beyondtrust.com/privilege-management/active-directory-bridge) and I am having troubles figuring out how to implement the LDAP integration with the domain. Would that be possible?

Marat Radchenko · Answer 1 · Fri Feb 12 2021 00:15:02 GMT+0800 (China Standard Time)

git-as-svn supports user authentication via LDAP, see docs.

SirIntellegence · Answer 2 · Fri Feb 12 2021 03:08:03 GMT+0800 (China Standard Time)

What I mean was if it was possible to use the system user list as a repo user list. In my case, the system already support becoming a domain user. In some other cases, someone might just want to use local Linux users without using any LDAP. Does that make sense?

Marat Radchenko · Answer 3 · Fri Feb 12 2021 03:27:10 GMT+0800 (China Standard Time)

Oh, so what you actually want is PAM authentication? Nope, this is currently not supported. I'm not even sure there exists a good Java lib to talk to libpam. I found libpam4j though the fact that it was touched last time in 2018 is a bit worrying. JPam is even more dead.

SirIntellegence · Answer 4 · Fri Feb 12 2021 03:32:16 GMT+0800 (China Standard Time)

Ah. Ok. Maybe mark it for future support. Others might want it at some point in time. I think I got LDAP to work with the simple binding.

Marat Radchenko · Answer 5 · Fri Feb 12 2021 03:43:23 GMT+0800 (China Standard Time)

libpam4j is a no-go because it does't support non-local users: kohsuke/libpam4j#2