diff options
author | EC2 Default User <eisin@users.noreply.github.com> | 2018-07-01 12:27:47 +0200 |
---|---|---|
committer | EC2 Default User <eisin@users.noreply.github.com> | 2018-07-01 12:27:47 +0200 |
commit | f3e17b7dd351420e06400868ec359c8ca9e5df18 (patch) | |
tree | 0eb43ff56150a195769dd5ed88318391a88af178 /README.adoc | |
parent | update .gitignore (diff) | |
download | pamldapd-f3e17b7dd351420e06400868ec359c8ca9e5df18.tar pamldapd-f3e17b7dd351420e06400868ec359c8ca9e5df18.tar.gz pamldapd-f3e17b7dd351420e06400868ec359c8ca9e5df18.tar.bz2 pamldapd-f3e17b7dd351420e06400868ec359c8ca9e5df18.tar.lz pamldapd-f3e17b7dd351420e06400868ec359c8ca9e5df18.tar.xz pamldapd-f3e17b7dd351420e06400868ec359c8ca9e5df18.tar.zst pamldapd-f3e17b7dd351420e06400868ec359c8ca9e5df18.zip |
Diffstat (limited to 'README.adoc')
-rw-r--r-- | README.adoc | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/README.adoc b/README.adoc index 31e0835..53ed9fa 100644 --- a/README.adoc +++ b/README.adoc @@ -36,6 +36,14 @@ This guide is based on Amazon Linux build binaries both x86-64 and i386: $ make all +. (Build without docker) + + $ yum install -y gcc golang pam-devel + $ go get github.com/msteinert/pam + $ go get github.com/nmcclain/asn1-ber + $ go get github.com/nmcclain/ldap + $ go build -a src/pamldapd.go + . Install to PATH directory (optional) copy x86-64 binary to bin directory: @@ -130,7 +138,10 @@ Tree structure of example configuration file `pamldapd.json.example` ## Restriction +While `pamldapd` uses PAM as authentication, some restrictions exist. + * When search operations, filter can be almost two patterns: `(&(uid=user)(objectClass=posixAccount))` or `(&(memberUid=user)(objectClass=posixgroup))` ** Must be included `objectclass` , like `(objectclass=posixAccount)` or `(objectclass=posixGroup)` . Other than that, for example `(objectclass=*)`, it will fail. -** Must be identified one record by username key. Enumeration is not supported. +** Must be identified one record by specifying username attribute. Enumeration is not supported. +* When search operation, an entry does not have `unixpassword` attribute. |