KB-9156: How to integrate the RHN Satellite server login to accept AD user authentication with DirectControl

Home >

KB-9156: How to integrate the RHN Satellite server login to accept AD user authentication with DirectControl

Product:

Centrify DirectControl ,

Published:

11 September,17 at 07:01 PM

Rating:

Applies to:
All versions of DirectControl on RHN Satellite 5.8 or higher.

Question:
What are the steps to enable the use of Active Directory login IDs via Centrify DirectControl for authenticating to the RHN Satellite application?

Answer:
RHN Satellite supports LDAP, Kerberos and other network-based authentication options via PAM. The following configuration will help enable PAM authentication via Centrify DirectControl on RHN Satellite servers:

1) Set up a PAM service file (usually /etc/pam.d/rhn-satellite) and have Satellite use it by adding the following line to /etc/rhn/rhn.conf:

pam_auth_service = rhn-satellite
(This assumes the PAM service file is named rhn-satellite.)

2) As an example for a Red Hat Enterprise Linux 7 system to authenticate against Active Directory, one could put the following in /etc/pam.d/rhn-satellite:

#%PAM-1.0
auth sufficient pam_centrifydc.so
auth requisite pam_centrifydc.so deny
account sufficient pam_centrifydc.so
account requisite pam_centrifydc.so deny
session required pam_centrifydc.so homedir
password sufficient pam_centrifydc.so try_first_pass
password requisite pam_centrifydc.so deny

3) Ensure that each user account added to the Satellite server has "Use PAM" enabled.

4) For the remaining steps, please follow the installation guide below (choose the appropriate version) :

https://access.redhat.com/documentation/en-US/Red_Hat_Network_Satellite/

(Link provided as a courtesy)