History of HowtoHostAuth

nss_vserver: http://dev.call2ru.com/nss_vserver.tar.bz2

fixed vslogin: http://dev.call2ru.com/vserverauth.tar.gz

== What's this? ==

This is host-auth module for linux-vserver powered systems.

Read about linux-vserver at http://linux-vserver.org/.

nss_vserver module allows you to auth users from vservers on host via standard PAM auth. If you want to make user login into their vserver via host, you should also get a bit modified vslogin (originally written by

Alec Thomas, http://swapoff.org/LinuxVServer) from http://linux-vserver.org/HowtoHostAuth

With using nss_vserver you not needed in syncshadows daemon from vserverauth.tar.gz -- only vslogin

== How to build and install? ==

On linux, just run

<code>

make install

</code>

After, try to run

<code>

make test

</code>

To see - is it works.

== How to remove it from system? ==

Just run

<code>

make uninstall

</code>

== How to use it? ==

After you have installed module, put vslogin to /sbin/, make it suid-root, and you are ready -- try to login into vserver named "test" with user "user" by loggin in into host with username "test-user" or "user@test" -- you should login fine and get into vserver.

WARNING! If you have installed vslogin, NEVER give shell access to your host to users -- any user on host, who able to execute programs and modify environment will be able to log into vservers as anybody he want!

* Note: avoid useing usernames or vserver names with dashes.

Because current version try only one configuration while searching for user in vserver db.

User "abc" on vserver "efg-hij" when written as "abc@efg-hij" will work fine, while "efg-hij-abc" will be threated as user "hij-abc" on vserver "efg".

User "abc-def" on vserver "efg" when written as "efg-abc-def" will work fine, while "abc-def@efg" will be threated as user "def@efg" on vserver "abc".

If you got problem with that -- use syncshadows method.

== Author and copyright ==

nss_vserver is written by Anton Fedorov <datacompboy@call2ru.com> 19 march 2006

This code is public domain, feel free to use it as you want.