62 lines
2.2 KiB
Plaintext
62 lines
2.2 KiB
Plaintext
SMArT 0.99 Perl http://www.lintux.cx/smart.html Released Mar 10 2001
|
|
|
|
|
|
This is the first official release of the Perl version of SMArT. It's a lot
|
|
faster than the old program, but very possibly not yet complete. Please tell
|
|
me what features are still missing or not working correctly so I can correct
|
|
it.
|
|
|
|
The program is (hopefully) also quite a lot more secure, although passwords
|
|
are still transferred over the network in almost-cleartext. The only way to
|
|
solve this is using https, but I don't know how it works (yet) so this is
|
|
all I can do... Instead of the old password system, you just have to fill in
|
|
your root login name + password to use SMArT. The program setuid()s to a
|
|
less privileged user as soon as possible, although this is not that
|
|
necessary, maybe. The less privileged user is specified in the smart.conf
|
|
file, in case you want to change it.
|
|
|
|
|
|
To get the program working, just add the following line to your
|
|
/etc/services file: (You can set the 902 to whatever port you want to run
|
|
SMArT on.)
|
|
|
|
smart 902/tcp
|
|
|
|
And the following line should be added to /etc/inetd.conf:
|
|
|
|
smart stream tcp nowait root /usr/local/smart/smart
|
|
|
|
(SMArT can be installed anywhere you want, just make sure the path in the
|
|
inetd.conf file is correct...)
|
|
|
|
You might also have to recompile the check_login binary. The following
|
|
command should do the job:
|
|
|
|
gcc check_login.c -o check_login -lpam -ldl
|
|
|
|
(The binary which comes with this tarball should work on Debian Potato
|
|
systems without recompiling.)
|
|
|
|
You probably also need to create a PAM configuration file for smart
|
|
authentication. Well, let's see how it works, I'm not sure since it's not
|
|
the same on every distro. :(
|
|
|
|
This is my /etc/pam.d/smart file:
|
|
|
|
auth required pam_unix.so
|
|
account required pam_unix.so
|
|
password required pam_unix.so
|
|
session required pam_unix.so
|
|
|
|
This should work on a Debian Potato system, but a RedHat system /might/ want
|
|
pam_pwdb instead, IIRC.
|
|
|
|
|
|
That should be enough to get it working. If you see problems, you can mail
|
|
me at lintux@lintux.cx or if you prefer you can use ICQ. (#72696705) (Dutch
|
|
people can speak their native language to me, FYI. ;)
|
|
|
|
Have fun!
|
|
|
|
Wilmer van der Gaast.
|