9bc910
#
9bc910
# pam_winbind configuration file
9bc910
#
9bc910
# /etc/security/pam_winbind.conf
9bc910
#
9bc910
9bc910
[global]
9bc910
9bc910
# turn on debugging
9bc910
;debug = no
9bc910
9bc910
# turn on extended PAM state debugging
9bc910
;debug_state = no
9bc910
9bc910
# request a cached login if possible
9bc910
# (needs "winbind offline logon = yes" in smb.conf)
9bc910
;cached_login = no
9bc910
9bc910
# authenticate using kerberos
9bc910
;krb5_auth = no
9bc910
9bc910
# when using kerberos, request a "FILE" krb5 credential cache type
9bc910
# (leave empty to just do krb5 authentication but not have a ticket
9bc910
# afterwards)
9bc910
;krb5_ccache_type =
9bc910
9bc910
# make successful authentication dependend on membership of one SID
9bc910
# (can also take a name)
9bc910
;require_membership_of =
9bc910
9bc910
# password expiry warning period in days
9bc910
;warn_pwd_expire = 14
9bc910
9bc910
# omit pam conversations
9bc910
;silent = no
9bc910
9bc910
# create homedirectory on the fly
9bc910
;mkhomedir = no