[Linux-HA] Re: hb_gui authentication

[Jan-Frode Myklebust]

On 2009-01-08, Yan Gao <ygao at novell.com> wrote:
>> 
>> Any hints to how I should give the group "admins" access to use
>> the gui using their private username/passwords instead of the "hacluster"
>> user ?
>
> Only users in "haclient" group have the permission.
>

OK, thanks!  I ran in to another problem when trying this. The
supplied /etc/pam.d/hbmgmtd only allowed local unix accounts:

    auth    required        pam_unix.so
    account required        pam_unix.so

Changed it to these to get the authentication working against
our directory server which is the system default:

    auth       include      system-auth
    account    include      system-auth

Maybe this should be changed to be the default?

------------------------------------------
--- mgmt/daemon/mgmtd.pam.old   2009-01-08 10:51:41.000000000 +0100
+++ mgmt/daemon/mgmtd.pam       2009-01-08 10:52:01.000000000 +0100
@@ -1,3 +1,2 @@
-auth    required        pam_unix.so
-account required        pam_unix.so
-
+auth       include      system-auth
+account    include      system-auth
------------------------------------------

Or is this different from distribution to distribution.. ?

  -jf