Commit Graph

68 Commits

Author SHA1 Message Date
Michel Decima
8fd5ffc46a packaging: bump version number 2021-10-20 02:56:53 -07:00
Michel Decima
c5aaa81fd8 doc: update notes 2021-10-20 02:56:53 -07:00
Michel Decima
ccb17c7352 feat: give higher priority to pam_sss module
With default priority (128), pam-auth-update put module pam_sss after
module pam_unix in /etc/pam.d/common-auth, and then a user with a
local account and local password synchronized with AD password will
never be granted a Kerberos TGT on session opening.
2021-10-20 02:54:46 -07:00
Michel Decima
af60473e89 fix: do not use --force with pam-auth-update
According to pam-auth-update(8), it is an error to use option --force
in postinst script:

    This  option  must not be used by package maintainer scripts;
    it is intended for use by administrators only.
2021-10-19 23:38:16 -07:00
Michel Decima
1c53777cd2 ci: enable deployment in production 2021-10-19 11:57:01 +02:00
Michel Decima
4b5b0b56d8 ci: enable build for ubuntu/impish 2021-10-18 11:00:52 +02:00
Michel Decima
19b90e3040 doc: update notes 2021-10-13 16:21:17 +02:00
Michel Decima
3f647b7fb4 chore: add utility script to switch login mode 2021-10-13 13:35:32 +02:00
Michel Decima
151c17f676 packaging: remove lintian warnings 2021-10-13 09:27:12 +02:00
Michel Decima
361e52fec6 packaging: bump version number 2021-10-13 09:10:19 +02:00
Michel Decima
6c7a4fd683 feat: add pam-pkcs11 configuration
Recommends sssd, sssd-tools, libpam-sss
Add SSSD configuration (sssd.conf)
Configure certificates for SSSD (postinst)
Restart SSSD service (postinst)
2021-10-13 09:08:02 +02:00
Michel Decima
d0cbb5093f packaging: bump version number 2021-10-12 13:48:21 +02:00
Michel Decima
9327c10443 ci: add .gitlab-ci.yml 2021-10-12 13:48:10 +02:00
Michel Decima
1574958cf5 feat: add pam-pkcs11 configuration
Recommends libpam-pkcs11 package.
Add configuration for Safenet module (pam_pkcs11.conf)
Add UID mapper generator (pkcs11_generate_uids)
Configure certificates for pam_pkcs11 from postinst.
2021-10-12 12:08:41 +02:00
Michel Decima
3ad734c384 fix: debhelper-compat version in d/control 2021-10-12 09:56:39 +02:00
Michel Decima
df1b0f8c36 feat: add GDM customization
disable fingerprint and smartcard login
add a banner text and logo on login screen
2021-10-08 18:10:39 +02:00
Michel Decima
433849aaad Add debian packaging
Auto configure PAM with pam-auth-update:
  - enable ccreds-check ccreds-save
  - enable krb5
2021-10-08 11:06:56 +02:00
Michel Decima
b70f191f1f Initial import 2021-10-08 10:11:42 +02:00