Howto HostAuth
From Linux-VServer
Contents |
What is this?
This is host-auth module for linux-vserver powered systems.
Read about linux-vserver at http://linux-vserver.org/.
nss_vserver module allows you to auth users from vservers on host via standard PAM auth. If you want to make user login into their vserver via host, you should also get a bit modified vslogin (originally written by
Alec Thomas, http://swapoff.org/LinuxVServer) from http://linux-vserver.org/HowtoHostAuth
With using nss_vserver you not needed in syncshadows daemon from vserverauth.tar.gz -- only vslogin
How to build and install?
On linux, just run
make install
After, try to run
make test
To see if it works.
How to remove it from system?
Just run
make uninstall
How to use it?
After you have installed module, put vslogin to /sbin/, make it suid-root, and you are ready -- try to login into vserver named "test" with user "user" by loggin in into host with username "test-user" or "user@test" -- you should login fine and get into vserver.
WARNING! If you have installed vslogin, NEVER give shell access to your host to users -- any user on host, who able to execute programs and modify environment will be able to log into vservers as anybody he want!
Usernames and vserver names with dashes
Avoid using usernames or vserver names with dashes.
Because current version try only one configuration while searching for user in vserver db.
User "abc" on vserver "efg-hij" when written as "abc@efg-hij" will work fine, while "efg-hij-abc" will be threated as user "hij-abc" on vserver "efg".
User "abc-def" on vserver "efg" when written as "efg-abc-def" will work fine, while "abc-def@efg" will be threated as user "def@efg" on vserver "abc".
If you got problem with that -- use syncshadows method.
Download links
nss_vserver: http://dev.call2ru.com/vs/nss_vserver.tar.bz2
fixed vslogin: http://dev.call2ru.com/vs/vserverauth.tar.gz
Author and copyright
nss_vserver is written by Anton Fedorov <datacompboy@call2ru.com> 19 march 2006
This code is public domain, feel free to use it as you want.
