Re: ldap user authentication, PAM and chsh (change shell): how to make it work?
Jean-Francois Malouin wrote:
Hi,
Please, bear with me! I know that this is not an openldap question per se, but
I've been banging my head on the wall for a long time on this issue and maybe
someone knows the quick answer: with user authentication coming from LDAP, what
is the magic that has to inserted with the PAM stuff on a client to allow users
to change their login shells using 'chsh'? I've been googling this for hours
to
no avail. I nice hint would just suffice.
The PAM API has no support for changing anything besides the password. The NSS API
has no support for changing anything at all, it is purely read-only. Any solution
for what you want to do is going to be non-standard, site- and implementation-specific.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/