Difference between revisions of "Howto HostAuth"
(Imported from old wiki, fixed download links)
Revision as of 07:27, 2 March 2008
What is this?
This is host-auth module for linux-vserver powered systems.
Read about linux-vserver at http://linux-vserver.org/.
nss_vserver module allows you to auth users from vservers on host via standard PAM auth. If you want to make user login into their vserver via host, you should also get a bit modified vslogin (originally written by
With using nss_vserver you not needed in syncshadows daemon from vserverauth.tar.gz -- only vslogin
How to build and install?
On linux, just run
After, try to run
To see if it works.
How to remove it from system?
How to use it?
After you have installed module, put vslogin to /sbin/, make it suid-root, and you are ready -- try to login into vserver named "test" with user "user" by loggin in into host with username "test-user" or "user@test" -- you should login fine and get into vserver.
WARNING! If you have installed vslogin, NEVER give shell access to your host to users -- any user on host, who able to execute programs and modify environment will be able to log into vservers as anybody he want!
Usernames and vserver names with dashes
Avoid using usernames or vserver names with dashes.
Because current version try only one configuration while searching for user in vserver db.
User "abc" on vserver "efg-hij" when written as "abc@efg-hij" will work fine, while "efg-hij-abc" will be threated as user "hij-abc" on vserver "efg".
User "abc-def" on vserver "efg" when written as "efg-abc-def" will work fine, while "abc-def@efg" will be threated as user "def@efg" on vserver "abc".
If you got problem with that -- use syncshadows method.
fixed vslogin: http://dev.call2ru.com/vs/vserverauth.tar.gz
Author and copyright
nss_vserver is written by Anton Fedorov <firstname.lastname@example.org> 19 march 2006
This code is public domain, feel free to use it as you want.