pam_krb5_migrate(7)

💖 NAME 💖

pam_krb5_migrate — the Kerberos 5 Migration PAM module ✨

It's a little guy from the Miscellaneous Information Manual, and bestie, it is so much cooler than that sounds.

---

🎀 SYNOPSIS 🎀

auth            optional pam_krb5_migrate.so

That's it. That's the whole summoning circle. 🕯️

---

✨ DESCRIPTION ✨

okay so picture this: pam_krb5_migrate is a stackable authentication module. Stackable means it plays nice — it sits in the auth stack and doesn't need to be the main character, it just does its thing.

Here's the vibe: it grabs the username and password that some earlier module in the stack already collected, and then it attempts to transparently add them to a Kerberos realm using the Kerberos 5 kadmin service. Like, no drama, no big announcement, the creds just quietly become Kerberos principals. 💅

Why would anyone want this? Because migrating a large installed userbase from whatever ancient pre-existing authentication method they've been using over to a Kerberos-based setup is lowkey an administrative nightmare 😭. This module eases those administrative burdens — people log in with their old creds and BOOM, they're in the realm. ate. 👑

---

🌸 OPTIONS 🌸

Here's everything you can pass to the authentication module, bestie, and yes, we're going through all of them:

• debug — turns on syslog(3) debugging information at LOG_DEBUG level. Crank it when you need to see everything that's happening. 🔍
• keytab=<file> — use an alternate keytab for authentication. If you don't specify one, the default is /etc/security/pam_krb5.keytab. 🗝️
• min_uid=<uid> — don't add principals for uids lower than <uid>. The default is 100, so your system accounts stay unbothered. 🛡️
• principal=<name> — use the key for <name> instead of the default pam_migrate/<hostname> key. ✨
• realm=<REALM> — update the database for a realm other than the default realm. 🌈

ngl, principal=<name> and realm=<REALM> are the ones you'll reach for when your setup isn't the plain vanilla default. iykyk 🫶

---

🦋 AUTHOR 🦋

pam_krb5_migrate was written by Steve Langasek <vorlon@netexpress.net>. 💖

This manpage was assembled by Jelmer Vernooij <jelmer@samba.org>. 🎀

Absolute icons, both of them. 👑

---

⭐ SEE ALSO ⭐

• kadmin(1)
• pam_krb5(5)
• pam(3)
• libpam(4)

---

and that's the whole page, bestie 🧚 this one's from the Miscellaneous Information Manual, dated 13 November 2006, and it's page pam_krb5_migrate(7) — go migrate a userbase, you've got this 💜