Pulling together the details

Last modified by Mitchell on 2022/01/25 06:45

The User Documentation page is now up, although it's restricted to users. Easy accessibility for current users is awaiting LDAP integration in Wagn, but that's supposedly coming Soon™.

In the meantime, I'm continuing to putter around learning better how some of these systems work. For example, hooking up a CentOS> system to a Windows Server system via Active Directory (using CentrifyExpress) has been fairly interesting, due to the downstream implications of not necessarily using local PAM authentication (since AD provides LDAP services, for example). Although I'm still having to get used to PuTTY using the Windows Kerberos ticket to do SSO onto my Linux system....

Miscellaneous notes so far:

  • Having AD LDAP means that as long as I push users to have an AD account, my non-elevated web applications don't need to have local PAM access (which requires some form of elevation).
  • Anything that does check PAM now needs to know to check AD as well (via pam_centrifydc.so).