Commit Graph

2 Commits

Author SHA1 Message Date
Michel Decima
d89eea147d feat: disable chpass provider in SSSD configuration
Using the "change password" feature of pam_sss modules always lead to a
bad situation where AD password and Gassi password are not synchronyzed
anymore. To avoid this, we disable the feature in SSSD configuration.

The network password can still be changed using the command `kpasswd`
provided by package `krb5-user`.
2021-11-01 18:58:30 +01:00
Michel Decima
6c7a4fd683 feat: add pam-pkcs11 configuration
Recommends sssd, sssd-tools, libpam-sss
Add SSSD configuration (sssd.conf)
Configure certificates for SSSD (postinst)
Restart SSSD service (postinst)
2021-10-13 09:08:02 +02:00