Red Hat SATELLITE 5.0.0 RELEASE NOTES Przewodnik Instalacji Pobierz pdf (Strona 74)

synchronization. Remember, hours use military time. Edit the crontab to include random

synchronization, like so:

0 1 * * * perl -le 'sleep rand 9000' && satellite-sync --email >/dev/null \

2>/dev/null

This particular job will run randomly between 1:00 a.m. and 3:30 a.m. system time each night

and redirect stdout and stderr from cron to prevent duplicating the more easily read message

from satellite-sync. Options other than --email can also be included. Refer to Table 6.2,

“Satellite Import/Sync Options” for the full list of options. Once you exit from the editor, the

modified crontab is installed immediately.

9. Implementing PAM Authentication

As security measures become increasingly complex, administrators must be given tools that

simplify their management. For this reason, RHN Satellite Server supports network-based

authentication systems via Pluggable Authentication Modules (PAM). PAM is a suite of libraries

that helps system administrators integrate the Satellite with a centralized authentication

mechanism, thus eliminating the need for remembering multiple passwords.

RHN Satellite Server supports LDAP, Kerberos, and other network-based authentication

systems via PAM. To enable the Satellite to use PAM and your organization's authentication

infrastructure, follow the steps below.

Note

To ensure that PAM authentication functions properly, install the pam-devel

package.

Set up a PAM service file (usually /etc/pam.d/rhn-satellite) and have the Satellite use it by

adding the following line to /etc/rhn/rhn.conf:

pam_auth_service = rhn-satellite

This assumes the PAM service file is named rhn-satellite.

To enable a user to authenticate against PAM, select the checkbox labeled Pluggable

Authentication Modules (PAM). It is positioned below the password and password

confirmation fields on the Create User page.

As an example, for a Red Hat Enterprise Linux 4 i386 system, to authenticate against Kerberos

one could put the following in /etc/pam.d/rhn-satellite:

Chapter 8. Maintenance

1 2 ... 69 70 71 72 73 74 75 76 77 78 79 80 81 82

Brak uwag

Red Hat SATELLITE 5.0.0 RELEASE NOTES Przewodnik Instalacji Strona 74