D&C Lug - Home Page
Devon & Cornwall Linux Users' Group

[ Date Index ][ Thread Index ]
[ <= Previous by date / thread ] [ Next by date / thread => ]

[LUG] GPG



Just looking over this, and I'm getting

<paste>
gpg: armor header: Version: GnuPG v1.0.7 (GNU/Linux)
gpg: Signature made Mon Jun 17 16:32:39 2002 BST using DSA key ID
0A539FA6
gpg: BAD signature from "Theo Zourzouvillys <theo@xxxxxxxxxxxxxxxx>"
</paste>

I'm using Evolution, GPG, 1.0.6. 
i've added Theo's key from his website, and edited the trust.

Can anyone suggest what's wrong?
Many thanks,

Ian


On Mon, 2002-06-17 at 16:32, Theo Zourzouvillys wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday 17 June 2002 10:14 am, you wrote:
I've just been looking into libpam_mysql, and realised that I can't use
this in the way I wanted, as I still need a line in /etc/passwd.

How do you go about user admin on your nice SQL backended system?

hey hey,,

take a look at nss-mysql, which will probably allow you to do what you want to 
do (we well as being more stable :)  if you use debian, it's in package 
libnss-mysql, otherwise its:

 http://sourceforge.net/projects/nss-mysql

just compile, install, and create /etc/mysql:

conf.version = 2;
users.host = 192.168.0.1;
users.database = auth;
users.db_user = nsswitch;
users.db_password = password;
users.table = Users;
users.user_column = Users.Username;
users.password_column = Users.Password;
users.userid_column = Users.ID;
users.uid_column = Users.UID;
users.gid_column = Users.GID;
users.realname_column = Users.Name;
users.homedir_column = Users.Home;
users.shell_column = Users.Shell;
users.where_clause =  Users.Disabled = 0;
groups.host = localhost;
groups.database = auth;
groups.db_user = nsswitch;
groups.db_password = password;
groups.group_info_table = Groups.Groups;
groups.group_name_column = Groups.Name;
groups.groupid_column = Groups.id;
groups.members_table = Users;
groups.member_userid_column = Users.UID;
groups.member_groupid_column = Users.GID;
groups.first_gid = 500;

then create /etc/nss-mysql-root.conf, and make sure you chmod 600:

conf.version = 2;
shadow.host = 192.168.0.1;
shadow.where_clause = Users.Disabled = 0;
shadow.database = auth;
shadow.db_user = nss-root;
shadow.db_password = password;
shadow.table = Users;
shadow.user_column = Users.Username;
shadow.password_column = Users.Password;
shadow.userid_column = Users.ID;
shadow.lastchange_column = UNIX_TIMESTAMP() - 10;
shadow.min_column = 1;
shadow.max_column = 2;
shadow.warn_column = 7;
shadow.inact_column = -1;
shadow.expire_column = -1;

then your database:


[toaster]~# mysqldump --quote auth Users
# MySQL dump 8.16
#
# Host: localhost    Database: auth
#--------------------------------------------------------
# Server version        3.23.47-log

#
# Table structure for table 'Users'
#

CREATE TABLE `Users` (
  `id` int(11) NOT NULL auto_increment,
  `Username` varchar(25) NOT NULL default '65535',
  `Password` varchar(50) NOT NULL default '',
  `UID` int(4) NOT NULL default '0',
  `GID` int(4) NOT NULL default '0',
  `Home` varchar(255) NOT NULL default '',
  `Name` varchar(255) NOT NULL default '',
  `Shell` enum('/bin/bash','/bin/sh','/bin/csh','/bin/badsh','/bin/suspendsh') 
NOT NULL default '/bin/badsh',
  `Disabled` tinyint(4) NOT NULL default '0',
  PRIMARY KEY  (`id`),
  UNIQUE KEY `username` (`Username`),
  UNIQUE KEY `uid` (`UID`)
) TYPE=MyISAM;

etc, etc...

then, tell libc to use nss-mysq, by editing /etc/nsswitch.conf, and changing 
the line:

passwd:         files compat

to:

passwd:         files mysql compat


and all should work ;)

make sure permissions on your database are right, or it's a security risk - if 
you're using it over a network, make sure you either use TLS, SSL, or IPSEC - 
even though password are encrypted, you don't want them floating around ;)

~ Theo

- -- 
Theo Zourzouvillys
 + Operations Manager
 + Associated Networks Limited
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9DgEX448CrwpTn6YRAqvHAKDschqdGJc6B2KcZxXUFdZlBXNpHQCeP6ra
2LD03B9Qgk79g34BZZN/nIk=
=etUD
-----END PGP SIGNATURE-----





--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.


Lynx friendly