NAME
pam_krb5_migrate - Kerberos 5 Migration PAM module
SYNOPSIS
auth optional pam_krb5_migrate.so
DESCRIPTION
pam_krb5_migrate is a stackable authentication module that takes a
username and password from an earlier module in the stack, and attempts
to transparently add them to a Kerberos realm using the Kerberos 5
kadmin service.
The module can be used to ease the administrative burdens of migrating
a large installed userbase from pre-existing authentication methods to
a Kerberos-based setup.
OPTIONS
The following options may be passed to the authentication module:
debug syslog(3) debugging information at LOG_DEBUG level.
keytab=<file> use alternate keytab for authentication (default is
/etc/security/pam_krb5.keytab).
min_uid=<uid> don't add principals for uids lower than <uid>.
(default is 100)
principal=<name>
use the key for <name> instead of the default
pam_migrate/<hostname> key
realm=<REALM> update the database for a realm other than the default
realm.
AUTHOR
pam_krb5_migrate was written by Steve Langasek <vorlon@netexpress.net>.
This manpage was assembled by Jelmer Vernooij <jelmer@samba.org>.
SEE ALSO
kadmin(1), pam_krb5(5), pam(3), libpam(4).
13 November 2006 pam_krb5_migrate(7)