活動目錄作為微軟的一種目錄服務，它使用了像Kerberos，ldap和SSL等一些開放的協定。 有多種方法可以通過使用AD進行身份認證，你可以使用pam_krb5, LDAP 或 winbind。
pam_krb5不需要任何配置。
pam_krb5
&HTTP://www.aliyun.com/zixun/aggregation/37954.html">nbsp;
# apt-get install krb5-user libpam-krb5
配置 /etc/krb5.conf, 例如，
[logging]
default = FILE:/var/log/krb5lib.log
[libdefaults]
ticket_lifetime = 24000
default_realm = EXAMPLE.COM
default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc
default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc
[realms]
EXAMPLE.COM = {
kdc = windc.example.com
admin_server = windc.example.com
default_domain = example.com
}
[domain_realm]
.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM
用你Windows網域控制站的IP或完整的功能變數名稱替換設定檔中的 windc.example.com，用你的kerberos域替換EXAMPLE.COM，這裡的 功能變數名稱必須是大寫的。
Start building with 50+ products and up to 12 months usage for Elastic Compute Service
1 on 1 presale consultation
24/7 Technical Support 6 Free Tickets per Quarter Faster Response
Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.
A comprehensive suite of global cloud computing services to power your business
Payment Methods We Support
