a3a04f
#
a3a04f
# pam_winbind configuration file
a3a04f
#
a3a04f
# /etc/security/pam_winbind.conf
a3a04f
#
a3a04f
a3a04f
[global]
a3a04f
a3a04f
# turn on debugging
a3a04f
;debug = no
a3a04f
a3a04f
# turn on extended PAM state debugging
a3a04f
;debug_state = no
a3a04f
a3a04f
# request a cached login if possible
a3a04f
# (needs "winbind offline logon = yes" in smb.conf)
a3a04f
;cached_login = no
a3a04f
a3a04f
# authenticate using kerberos
a3a04f
;krb5_auth = no
a3a04f
a3a04f
# when using kerberos, request a "FILE" krb5 credential cache type
a3a04f
# (leave empty to just do krb5 authentication but not have a ticket
a3a04f
# afterwards)
a3a04f
;krb5_ccache_type =
a3a04f
a3a04f
# make successful authentication dependend on membership of one SID
a3a04f
# (can also take a name)
a3a04f
;require_membership_of =
a3a04f
a3a04f
# password expiry warning period in days
a3a04f
;warn_pwd_expire = 14
a3a04f
a3a04f
# omit pam conversations
a3a04f
;silent = no
a3a04f
a3a04f
# create homedirectory on the fly
a3a04f
;mkhomedir = no