Unix administration - PAM (not Samba) username mapping

Author

PAM (not Samba) username mapping

listbox@nedron.net

2005-02-04, 6:01 pm

We're using RSA's ACE/Server clients to authenticate users internally
on hosts. The problem is that the users are entered on the ACE/Server
as "foo.bar"-style names, while the local system accounts (mix of
Solaris 8 and 9) use "fbar"-style logins.

The ACE agent uses a PAM module to talk to the ACE/Server.

What I need to figure out is if there's anyway to allow a user to "ssh
foo.bar@sysname.com", have PAM use foo.bar as the auth username, but
then drop the user into their fbar environment after authentication.

I know the Samba package can handle PAM user mapping, but that doesn't
do me any good.

Any ideas?

-David Nedrow