Howto HostAuth - Revision history

213.187.251.250: /* Installation Instructions */

2009-07-19T12:31:32Z

‎Installation Instructions

2009-07-19T12:31:15Z

‎Installation Instructions

2009-03-27T15:58:42Z

2008-10-27T08:27:26Z

added troubleshooting section

2008-10-27T07:48:33Z

‎Installation Instructions

2008-08-16T15:21:40Z

Unify styling

2008-08-08T15:58:53Z

Added note about usage of correct version.

2008-08-08T09:30:25Z

added link to 64bit version of libnss_vserver

2008-08-08T09:12:00Z

vslogin and /vservers note

2008-03-07T05:08:55Z

Added use case

@@ Line 20: / Line 20: @@
   make install
- * Note: on recent kernels test passes, but you unable to login via ssh. To fix that problem:
+* Note: on recent kernels test passes, but you unable to login via ssh. To fix that problem:
 .1. edit /etc/nsswitch.conf, remove "vserver" from "group:" line
 .2. Add into /etc/group line "vserver:x:9999:"

@@ Line 19: / Line 19: @@
 . On linux, just run
   make install
 . After, try to run

← Older revision		Revision as of 15:58, 27 March 2009
Line 71:		Line 71:
	vslogin:chroot: No such file or directory		vslogin:chroot: No such file or directory
	indicates that vslogin can't access the vserver set in the GECOS field (i.e. you possibly have a typo in the GECOS field).		indicates that vslogin can't access the vserver set in the GECOS field (i.e. you possibly have a typo in the GECOS field).
		+
		+	[[Category:HowTo]]

← Older revision		Revision as of 08:27, 27 October 2008
Line 66:		Line 66:

	vslogin was written by Alec Thomas (http://swapoff.org/LinuxVServer)		vslogin was written by Alec Thomas (http://swapoff.org/LinuxVServer)
		+
		+	== Troubleshooting ==
		+
		+	vslogin:chroot: No such file or directory
		+	indicates that vslogin can't access the vserver set in the GECOS field (i.e. you possibly have a typo in the GECOS field).

@@ Line 15: / Line 15: @@
 == Installation Instructions ==
-. Get appropriate version. On x86 versions there need to use pthread version, on amd64 (and possible x86_64) need to use cthreads version (listed as nss_vserver_64). Also, on amd64 it stored into /lib/, not into /lib/tls/.
+. Get the appropriate version. On x86 versions you need to use the pthread version, on amd64 (and possible x86_64) you need the cthreads version (listed as nss_vserver_64). Also, on amd64 it's in /lib/, not in /lib/tls/.
 . On linux, just run

@@ Line 28: / Line 28: @@
 Just run
-<code>
+ make uninstall
-−
 make uninstall
-−
-</code>
 == Use with vslogin ==

← Older revision		Revision as of 09:30, 8 August 2008
Line 69:		Line 69:

	nss_vserver: http://dev.call2ru.com/vs/nss_vserver.tar.bz2		nss_vserver: http://dev.call2ru.com/vs/nss_vserver.tar.bz2
		+
		+	nss_vserver_64 (for use on 64bit systems): http://dev.call2ru.com/vs/nss_vserver_64.tar.bz2

	modified vslogin: http://dev.call2ru.com/vs/vserverauth.tar.gz		modified vslogin: http://dev.call2ru.com/vs/vserverauth.tar.gz

← Older revision		Revision as of 09:12, 8 August 2008
Line 46:		Line 46:

	After you have installed module, (and have vslogin copied to /sbin/ and suid-root) you are ready: try to login into a guest, say one named "test" with user "user", by loggin in into the host with username "test-user" or "user@test." You should find yourself logged into the guest.		After you have installed module, (and have vslogin copied to /sbin/ and suid-root) you are ready: try to login into a guest, say one named "test" with user "user", by loggin in into the host with username "test-user" or "user@test." You should find yourself logged into the guest.
		+
		+	Note: vslogin requires vservers root too be at /vservers, so make it as symlink to your location. For example, for debian systems need to do
		+	ln -s var/lib/vservers /vservers

	== Caveats ==		== Caveats ==

@@ Line 1: / Line 1: @@
 == What is this? ==
-This is PAM host-auth module for linux-vserver powered systems.
+nss_vserver is a nss authentication module for linux-vserver powered systems which allows processes running on the host (sshd, getty) to authenticate users that exist on guests.
-The nss_vserver module allows processes running on the host (sshd, getty) to authenticate users that exist on guests.
+The module should almost transparently drop in to a modern Linux system: PAM would call its pam_unix module, which would in turn look through the nss modules to complete the process.
 If you want to complete the guest login process, you should also get a modified version of vslogin linked to below. vslogin will pick up after authentication and deliver the user to a shell on his guest.
 Note that with nss_vserver you don't need the syncshadows included in the vserverauth tarball.
 == Installation Instructions ==