3b29a2
#
3b29a2
# pam_winbind configuration file
3b29a2
#
3b29a2
# /etc/security/pam_winbind.conf
3b29a2
#
3b29a2
3b29a2
[global]
3b29a2
3b29a2
# turn on debugging
3b29a2
;debug = no
3b29a2
3b29a2
# turn on extended PAM state debugging
3b29a2
;debug_state = no
3b29a2
3b29a2
# request a cached login if possible
3b29a2
# (needs "winbind offline logon = yes" in smb.conf)
3b29a2
;cached_login = no
3b29a2
3b29a2
# authenticate using kerberos
3b29a2
;krb5_auth = no
3b29a2
3b29a2
# when using kerberos, request a "FILE" krb5 credential cache type
3b29a2
# (leave empty to just do krb5 authentication but not have a ticket
3b29a2
# afterwards)
3b29a2
;krb5_ccache_type =
3b29a2
3b29a2
# make successful authentication dependend on membership of one SID
3b29a2
# (can also take a name)
3b29a2
;require_membership_of =
3b29a2
3b29a2
# password expiry warning period in days
3b29a2
;warn_pwd_expire = 14
3b29a2
3b29a2
# omit pam conversations
3b29a2
;silent = no
3b29a2
3b29a2
# create homedirectory on the fly
3b29a2
;mkhomedir = no