Bug 38610 - Change UMC PAM config template to mutlifile
Change UMC PAM config template to mutlifile
Status: RESOLVED DUPLICATE of bug 31943
Product: UCS
Classification: Unclassified
Component: UMC (Generic)
UCS 4.0
All Linux
: P5 enhancement (vote)
: ---
Assigned To: UMC maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2015-05-27 11:01 CEST by Cornelius Kölbel
Modified: 2015-08-12 09:43 CEST (History)
3 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Roadmap discussion
Max CVSS v3 score:


Attachments
Example multifile template (1018 bytes, application/x-compressed-tar)
2015-05-27 11:01 CEST, Cornelius Kölbel
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Cornelius Kölbel 2015-05-27 11:01:31 CEST
Created attachment 6923 [details]
Example multifile template

Hi,

I am writing an App "privacyIDEA PAM" that mangles with the PAM authentication to add a second factor (One Time Password) to the authentication process.

To do so, the App needs to add a line in the PAM configuration file.
This works fine for /etc/pam.d/common-auth and thus for "login" and "ssh", which include common-auth.

The PAM config files are mutlitemplate files, so that the "privacyIDEA PAM" can just add a template snippet to the directory:

   /etc/univention/templates/files/etc/pam.d/common-auth.d/

to get the desired effect.

Two Factor Authentication (OTP) will also work, when authenticating to the Univention Management Console.

But unfortunately I can not pack this in the "privacyIDEA PAM" app, since the PAM config for umc is a single file template in:

   /etc/univention/templates/files/etc/pam.d/univention-management-console

So my request is, to change the single file template to a multifile template like attached (10 and 50, so that the OTP part has the possibility to sit in between)

Thanks a lot and kind regards
Cornelius
Comment 1 Florian Best univentionstaff 2015-08-12 09:43:43 CEST
I implemented the UMC pam configuration file as UCR-multifile during the work on SAML2.0 UMC Single Sign On authentication in UCS 4.1.

*** This bug has been marked as a duplicate of bug 31943 ***