cyberninjas / libnss_aad Goto Github PK
View Code? Open in Web Editor NEWName Service Switch (NSS) Module for performing user lookups against the Azure Active Directory (AAD).
License: GNU General Public License v3.0
Name Service Switch (NSS) Module for performing user lookups against the Azure Active Directory (AAD).
License: GNU General Public License v3.0
https://github.com/besser82/libxcrypt
--
If user A is part of security group Foo in the Azure portal, and user B is part of security group Bar; group Foo should map to the sudoers group, while group Bar should map to the users group.
cat /var/log/messages
Jun 7 12:16:41 remote kernel: (imesyncd)[472]: segfault at 0 ip 00007fd931c094de sp 00007ffe862ad2c0 error 4 in libnss_aad.so.2[7fd931c08000+3000]
Jun 7 12:16:41 remote kernel: (imesyncd)[536]: segfault at 0 ip 00007fd930c074de sp 00007ffe862ad2c0 error 4 in libnss_aad.so.2[7fd930c06000+3000]
Jun 7 12:16:41 remote kernel: (imesyncd)[541]: segfault at 0 ip 00007fd930c074de sp 00007ffe862ad2c0 error 4 in libnss_aad.so.2[7fd930c06000+3000]
Jun 7 12:16:41 remote kernel: (imesyncd)[556]: segfault at 0 ip 00007fd930c074de sp 00007ffe862ad2c0 error 4 in libnss_aad.so.2[7fd930c06000+3000]
Jun 7 12:16:41 remote kernel: (imesyncd)[574]: segfault at 0 ip 00007fd930c074de sp 00007ffe862ad2c0 error 4 in libnss_aad.so.2[7fd930c06000+3000]
uname -a
Linux remote 4.15.0-1040-aws #42-Ubuntu SMP Fri May 17 13:47:10 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
apt list --installed | grep libnss-aad
libnss-aad/bionic,now 0.0.3-0~201906051458~ubuntu18.04.1 amd64 [installed]
su - jnchi
returned odata.error
Segmentation fault
Instead of /etc/libnss-aad.conf
, and /etc/pam_aad.conf
, both should use a unified configuration, /etc/aad.conf
, or in the case where the values don't match, /etc/aad/pam.conf
, and /etc/aad/nss.conf
.
# /etc/aad/{{service}}.conf
/etc/aad/libnss.conf
/etc/aad/openssh.conf
/etc/aad/openvpn.conf
RESOURCE_ID
-> RESOURCE
, and assign the value to https://graph.microsoft.com.HTTP
request in verify_user()
, to https://graph.microsoft.com/v1.0/me.pam_aad.c
).See: Microsoft Graph or the Azure AD Graph
Resources:
ls /returned odata.error
returned odata.error
bin/ dev/ home/ initrd.img.old lib64/ media/ opt/ root/ sbin/ sys/ usr/ vmlinuz
boot/ etc/ initrd.img lib/ lost+found/ mnt/ proc/ run/ srv/ tmp/ var/ vmlinuz.old
User is created on successful directory lookup, however a password is currently not set for the user, causing authentication to fail.
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010 NO_PUBKEY 04EE7237B7D453EC
Source: https://travis-ci.org/CyberNinjas/libnss_aad/builds/547901757
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.