Options - Red Hat ENTERPRISE LINUX 5 - DEPLOYMENT Deployment Manual

Chapter 26. Authentication Configuration
The Kerberos Settings dialogue also allows you to use DNS to resolve hosts to realms and locate
KDCs for realms.
The krb5-libs and krb5-workstation packages must be installed for this option to work. For
Section 43.6, "Kerberos".
more information about Kerberos, refer to
LDAP
The Enable LDAP Support option instructs standard PAM-enabled applications to use LDAP for
authentication. The Configure LDAP... button allows you to configure LDAP support with options
identical to those present in Configure LDAP... under the User Information tab. For more information
Section 26.1, "User Information".
about these options, refer to
The openldap-clients package must be installed for this option to work.
Smart Card
The Enable Smart Card Support option enables Smart Card authentication. This allows users to log
in using a certificate and key associated stored on a smart card. Click the Configure Smart Card...
button for more options.
The pam_pkcs11 and coolkey packages must be installed for this option to work. For more
Section 43.3.1.3, "Supported Smart Cards" Section 43.3,
information about smart cards, refer to under
"Single Sign-on (SSO)".
SMB
The Enable SMB Support option configures PAM to use a Server Message Block (SMB) server to
authenticate users. SMB refers to a client-server protocol used for cross-system communication;
it is also the protocol used by Samba to appear as a Windows server to Windows clients. Click the
Configure SMB... button to specify the following:
• Workgroup — Specifies the SMB workgroup to use.
• Domain Controllers — Specifies the SMB domain controllers to use.
Winbind
The Enable Winbind Support option configures the system to connect to a Windows Active Directory
or a Windows domain controller. User information from the specified directory or domain controller can
then be accessed, and server authentication options can be configured.
The Configure Winbind... options are identical to those in the Configure Winbind... button on the
User Information tab. Please refer to Winbind Section 26.1, "User Information") for more
(under
information.

26.3. Options

This tab allows other configuration options, as listed below.
420