Reputation
1,197
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
3 16
Impact
~135k people reached

1d
awarded  Popular Question
1d
reviewed Reviewed vim frequently does not display text
Aug
24
comment How to use `yes` with `xargs -p`?
It looks like you're trying to remove a single file. Why doesn't rm $filename work?
Aug
24
reviewed No Action Needed “Display all <num> possibilities? (y or n)” for ls command
Aug
24
reviewed No Action Needed Ubuntu 14.04.02LTS resolvconf -u creates an invalid line “nameserver Google's” in resolv.conf
Aug
20
comment Ubuntu 14.04 stuck at login screen
Note that you don't have to re-install Ubuntu to fix a problem that prevents you from logging in to a system: you can boot into a live image or system rescue image (e.g. via USB or CD-ROM), then mount or chroot into your root filesystem to start recovering. You can use this method to, e.g., fix configuration files, add/remove/upgrade packages, back up files or filesystems, etc.
Aug
20
reviewed No Action Needed Tunnel all network traffic through another Linux server
Aug
19
suggested rejected edit on Restarting LDAP client service
Aug
10
answered recommended procedure to create a user/group during RPM install
Jul
28
comment How can I use different kerberos principals for sudo than for system-auth?
I ended up solving my problem. Basically, the approach that I'm using is to "proxy" kerberos through pam_sss for one service (login) and use pam_krb5 directly for another service (sudo). This way I can use different appdefaults sections for the two services and take advantage of separate mappings attributes for each service. I'll write up my solution and add it to your answer tomorrow.
Jul
28
comment How can I use different kerberos principals for sudo than for system-auth?
I saw that update - looks like exactly what I need - unfortunately, I don't see the alt_auth_map option to pam_krb5 on RHEL 6.7 or 7.1 :( (and building our own pam-krb5 package would just be laterally transforming our original problem)
Jul
28
comment How can I use different kerberos principals for sudo than for system-auth?
Hmmm, looks like I may be able to perform dynamic mapping using the full_name_format option in a domain block of sssd.conf (I'm looking at a man page on RHEL 6.7). Where were you seeing that SSSD only supports static mappings?
Jul
28
comment Building RPM results in nothing generated in RPMS directory
Also, why are you creating a package that requires a package called python2.6 and a package called python2.7? I doubt those packages are available on most RHEL systems (the Python package on all RHEL systems I know of is simply called python), and those packages look like they would conflict anyway.
Jul
28
comment Building RPM results in nothing generated in RPMS directory
As an aside, you never declared any files in your %files section. Without any files declared, your package will be empty.
Jul
28
comment Building RPM results in nothing generated in RPMS directory
Can you post the whole output from rpmbuild -ba?
Jul
28
comment How can I use different kerberos principals for sudo than for system-auth?
Oh, I see what you're saying now. I read too quickly and I thought you meant using SSSD to restrict a service to a particular Kerb domain. This sounds promising.
Jul
28
comment How can I use different kerberos principals for sudo than for system-auth?
I can configure pam_krb5 to restrict a service to a particular domain as well, so I'm not sure I'm buying anything by using pam_sssd. And I'm not sure if I can do custom mappings on a per-domain level (I inferred from my reading of the man page that mappings is a global configuration option). I like this idea, though. I'll look into it and see if it leads anywhere.
Jul
27
asked How can I use different kerberos principals for sudo than for system-auth?
May
18
accepted sed - print and branch
May
18
comment sed - print and branch
thanks, after seeing your answer and then reading through the sed documentation again, this is now obvious! can't believe I didn't think of it before :P