3 ms·
> So don't do that. Use kerberos auth with LDAP, and use native kerberos support in apps, don't use kerberos with pam. Or buy into the Hashicorp ecosystem and
by inferiorhuman 10y ago
> So don't do that. Use kerberos auth with LDAP, and use native kerberos support in apps, don't use kerberos with pam.
Or buy into the Hashicorp ecosystem and use Vault + one-time passwords (SSH) and dynamically generated credentials (everything else like database creds).