Red Hat NETWORK - USER 3.0 Przewodnik Instalacji Pobierz pdf (Strona 79)

Enabling Push to Clients

Pluggable Authentication Modules (PAM). PAM is a suite of libraries that helps system administrators

integrate the Satellite with a centralized authentication mechanism, thus eliminating the need for

remembering multiple passwords.

RHN Satellite supports LDAP, Kerberos, and other network-based authentication systems via PAM.

To enable the Satellite to use PAM and your organization's authentication infrastructure, follow the

steps below.

Note

To ensure that PAM authentication functions properly, install the pam-devel package.

Set up a PAM service file (usually /etc/pam.d/rhn-satellite) and have the Satellite use it by

adding the following line to /etc/rhn/rhn.conf:

pam_auth_service = rhn-satellite

This assumes the PAM service file is named rhn-satellite.

To enable a user to authenticate against PAM, select the checkbox labeled Pluggable

Authentication Modules (PAM). It is positioned below the password and password confirmation

fields on the Create User page.

As an example, for a Red Hat Enterprise Linux 5 i386 system, to authenticate against Kerberos one

could put the following in /etc/pam.d/rhn-satellite:

#%PAM-1.0

auth required pam_env.so

auth sufficient pam_krb5.so no_user_check

auth required pam_deny.so

account required pam_krb5.so no_user_check

Please note that changing the password on the RHN website changes only the local password on the

RHN Satellite, which may not be used at all if PAM is enabled for that user. In the above example, for

instance, the Kerberos password will not be changed.

8.11. Enabling Push to Clients

In addition to allowing client systems to regularly poll the Satellite for scheduled actions, you may

enable the Satellite to immediately initiate those tasks on Provisioning-entitled systems. This bypasses

the typical delay between scheduling an action and the client system checking in with RHN to retrieve

it. This support is provided by the OSA dispatcher (osad).

OSA dispatcher is a service that periodically runs a query that checks the Satellite server to see

if there are any commands to be executed on the client. If there are, it sends a message through

jabberd to the osad instances running on the clients.

1 2 ... 74 75 76 77 78 79 80 81 82 83 84 85 86

Brak uwag

Red Hat NETWORK - USER 3.0 Przewodnik Instalacji Strona 79