X-Git-Url: http://git.cascardo.info/?p=cascardo%2Fipsilon.git;a=blobdiff_plain;f=README;h=9bde0cc370eb9fae8b22fb04c6b001c2a378e1bd;hp=dc4dae83aa5866f156eecc35e8a5810e452f08a3;hb=158c4cdefc0bd5b8dabe38685c1bebccc24d656b;hpb=493384f04be7f5615a2344ca896028837bfaa3a4 diff --git a/README b/README index dc4dae8..9bde0cc 100644 --- a/README +++ b/README @@ -28,9 +28,9 @@ Prerequisites: - A keytab if Kerberos authentication is desired - An unprivileged user to run the Ipsilon code (defaults to 'ipsilon') -Currently there are only two available authentication modules, Kerberos and -PAM. The Kerberos module uses mod_auth_kerb (which it will configure for you at -install time), the Pam module simply uses the PAM stack with a default service +Currently there are only two available authentication modules, GSSAPI and +PAM. The Kerberos module uses mod_auth_gssapi (which it will configure for +you at install time), the Pam module simply uses the PAM stack with a default service name set to 'remote'. NOTE: The PAM module is invoked as an unprivileged user so if you are using the @@ -39,7 +39,7 @@ not work properly. Please use a different PAM module, like pam_sss, pam_ldap, etc.. Before you run the install script make sure to create an administrative user -that can be authenticated either via PAM or Kerberos. The default name the +that can be authenticated either via PAM or GSSAPI. The default name the installation script expects is 'admin' but that can be changed with the command line option named --admin-user @@ -50,9 +50,10 @@ name is referenced and resolved by remote clients. Other options are available by running ipsilon-server-install --help -To install a server that allow both Kerberos and PAM authentication use: +To install a server that allow both GSSAPI (Kerberos) and PAM authentication +use: - $ ipsilon-server-install --krb=yes --pam=yes + $ ipsilon-server-install --gssapi=yes --pam=yes This command will generate a default instance called 'idp' (you can change the default name using the --instance switch). Multiple instance can be installed