Различия

Показаны различия между двумя версиями страницы.

--- russianway:adds_join [2025/02/17 22:31] – root
+++ russianway:adds_join [2025/02/18 19:14] (текущий) – [Rutoken 2fa] root
@@ Строка 62: / Строка 62: @@
 [libdefaults]
 ...
-pkinit_anchors = FILE:/etc/krb5/cacert.pem
+ pkinit_anchors = FILE:/etc/krb5/cacert.pem
-pkinit_identities = PKCS11:/usr/lib/librtpkcs11ecp.so
+ pkinit_kdc_hostname = ipa.virt.int
+ pkinit_eku_checking = kpServerAuth
+ pkinit_identities = PKCS11:librtpkcs11ecp.so
 </code>
-<code bash>
+<code bash | /etc/sssd/sssd.conf>
+[pam]
+pam_cert_auth = True
+</code>
+<code bash | /etc/pam.d/common-auth>
+auth    [success=6 default=ignore]      pam_krb5.so minimum_uid=2500 try_pkinit
+</code>
+<code bash | /usr/share/pam-configs/krb5>
+Auth-Initial:
+        [success=end default=ignore]    pam_krb5.so minimum_uid=2500 try_pkinit
 </code>