Caa4nnrpd

From M1Research

Revision as of 20:06, 6 January 2006 (view source) Verem (Talk | contribs) (→Installation) ← Older edit		Revision as of 20:09, 6 January 2006 (view source) Verem (Talk | contribs) Newer edit →
Line 27:		Line 27:
	</pre> if this modules not installed, please visit CPAN for download required modules		</pre> if this modules not installed, please visit CPAN for download required modules
	*4. Unpack archive into <code>/usr/local/caa4nnrpd/</code>		*4. Unpack archive into <code>/usr/local/caa4nnrpd/</code>
		+
		+	===Configuration===
		+
		+	*1. Configure INN reader config file (<code>/etc/news/readers.conf</code>):
		+	<pre>
		+	auth "anonymous"
		+	{
		+	default:
		+	}
		+
		+	auth "m1users" {
		+	hosts:              10.1.0.0/16
		+	perl_auth:          "/usr/local/caa4nnrpd/auth.pl"
		+	perl_access:        "/usr/local/caa4nnrpd/access.pl"
		+	}
		+
		+	access "localhost" {
		+	users:      ""
		+	newsgroups: *.public
		+	access:    "R"
		+	}
		+	</pre>
		+	*2. Configure PAM (examples of mine, user authentificated against domain controller, make sure that <code>krb5.conf</code> is right): <code>/etc/pam.d/caa4nnrpd</code>:
		+	<pre>
		+	#%PAM-1.0
		+	auth      required    /lib/security/pam_stack.so service=system-auth-krb5only
		+	account    required    /lib/security/pam_stack.so service=system-auth-krb5only
		+	</pre>
		+	3. Check config file: (example of mine)

---

Revision as of 20:09, 6 January 2006

Complex Authentification and Authorization for nnrdp

Contents 1 Description 2 Features 3 Downloads 4 Installation 5 Configuration

Description

caa4nnrpd is a Perl program for authentification and authoraization for INN news reader daemon. That complex perform fluent newsgroups access control. Authentification provided throw the PAM and access control provides throw the preconfigured access list.

Features

• Open Source
• Easyes integration way
• Authentification throw the pam could be configured to authentificate agains DomainController or other password control system

Downloads

• Version 0.90 (2005-01-03 17:00)
  • 1. Download: caa4nnrpd-0.90.tar.bz2
  • 2. Changelog:
    • 1. A bit of code cleanup

Installation

• 1. Check that INN version is 2.4.1 or higher
• 2. Download source tarball
• 3. Check if next modules installed:

Data::Dump
Authen::PAM

if this modules not installed, please visit CPAN for download required modules

• 4. Unpack archive into /usr/local/caa4nnrpd/

Configuration

• 1. Configure INN reader config file (/etc/news/readers.conf):

auth "anonymous"
{
    default:            
}

auth "m1users" {
    hosts:              10.1.0.0/16
    perl_auth:          "/usr/local/caa4nnrpd/auth.pl"
    perl_access:        "/usr/local/caa4nnrpd/access.pl"
}

access "localhost" {
    users:      ""
    newsgroups: *.public
    access:     "R"
}

• 2. Configure PAM (examples of mine, user authentificated against domain controller, make sure that krb5.conf is right): /etc/pam.d/caa4nnrpd:

#%PAM-1.0
auth       required     /lib/security/pam_stack.so service=system-auth-krb5only
account    required     /lib/security/pam_stack.so service=system-auth-krb5only

3. Check config file: (example of mine)