On Thu, Jul 09, 2020 at 04:56:21PM +0100, Dominik Vogt via FreeIPA-users wrote: > We have a freeipa server and some clients. One of the clients > runs a (minimal) Docker container with some custom application. > The application does user authorization and authentication using > PAM. Is there a good way to make PAM delegate all decisions to > the host running the Docker conainer? We'd like to avoid > configuring the container as a separate freeipa client.
Hi, it should be sufficient to make the sockets from /var/lib/sss/pipes/ available in the container at the same place, then pam_sss and libnss_sss should be able to talk to SSSD on the host. You might have to call authcon/authselect or similar to tune the PAM and nss configuration so that SSSD is used. HTH bye, Sumit > > Ciao > > Dominik ^_^ ^_^ > > -- > > Dominik Vogt > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
