Howto HostAuth

From Linux-VServer

Revision as of 06:27, 2 March 2008 by Volkris (Talk | contribs)

Jump to: navigation, search

Contents

What is this?

This is host-auth module for linux-vserver powered systems.

Read about linux-vserver at http://linux-vserver.org/.

nss_vserver module allows you to auth users from vservers on host via standard PAM auth. If you want to make user login into their vserver via host, you should also get a bit modified vslogin (originally written by

Alec Thomas, http://swapoff.org/LinuxVServer) from http://linux-vserver.org/HowtoHostAuth

With using nss_vserver you not needed in syncshadows daemon from vserverauth.tar.gz -- only vslogin

How to build and install?

On linux, just run

make install

After, try to run

make test

To see if it works.

How to remove it from system?

Just run

make uninstall

How to use it?

After you have installed module, put vslogin to /sbin/, make it suid-root, and you are ready -- try to login into vserver named "test" with user "user" by loggin in into host with username "test-user" or "user@test" -- you should login fine and get into vserver.

WARNING! If you have installed vslogin, NEVER give shell access to your host to users -- any user on host, who able to execute programs and modify environment will be able to log into vservers as anybody he want!

Usernames and vserver names with dashes

Avoid using usernames or vserver names with dashes.

Because current version try only one configuration while searching for user in vserver db.

User "abc" on vserver "efg-hij" when written as "abc@efg-hij" will work fine, while "efg-hij-abc" will be threated as user "hij-abc" on vserver "efg".

User "abc-def" on vserver "efg" when written as "efg-abc-def" will work fine, while "abc-def@efg" will be threated as user "def@efg" on vserver "abc".

If you got problem with that -- use syncshadows method.

Download links

nss_vserver: http://dev.call2ru.com/vs/nss_vserver.tar.bz2

fixed vslogin: http://dev.call2ru.com/vs/vserverauth.tar.gz

Author and copyright

nss_vserver is written by Anton Fedorov <datacompboy@call2ru.com> 19 march 2006

This code is public domain, feel free to use it as you want.

Personal tools