pam_krb5_migrate is a stackable authentication module that takes a username and password from an earlier module in the stack and attempts to transparently add the user to a Kerberos realm using the Kerberos 5 kadmin service. The module can be used to ease the administrative burdens of migrating a large installed userbase from pre-existing authentication methods to a Kerberos-based setup.
| Tags | Security Systems Administration |
|---|---|
| Licenses | GPL |
Recent releases


Release Notes: This release fixes compatibility with newer versions of Heimdal.


Release Notes: A crash bug has been fixed when used with Heimdal Kerberos.


Release Notes: Compatibility with heimdal Kerberos has been fixed, and a manual page has been added.


Release Notes: This release includes a workaround for a bug in libkdb5.so from MIT Kerberos 1.2.3 and above. Previous versions of pam_krb5_migrate would compile, but would fail with a runtime linker error.


Release Notes: This release adds support for a new 'min_uid' option, adds support for specifying the lowest limit on user ids whose passwords should be added to the KDC, and fixes a cosmetic buglet in the source.