For those that are interested, you will notice that using esxcfg-auth to configure AD auth is just a "special" kind of Kerberos configuration, as per the contents of the script:
Re: Add active directory user authentication in ESX3
def enablead(option, opt, value, parser):
Managers\['PAM'].DelModule('pam_krb5.so', 'auth')
Managers\['PAM'].AddModule('/lib/security/$ISA/pam_krb5.so', 'auth', 'sufficient', 'likeauth', 1)
Managers\['PAM'].DelModule('pam_krb5.so', 'account')
Managers\['PAM'].AddModule('/lib/security/$ISA/pam_krb5.so', 'account', 'sufficient', None, 0)
Managers\['PAM'].DelModule('pam_krb5.so', 'password')
Managers\['PAM'].AddModule('/lib/security/$ISA/pam_krb5.so', 'password', 'sufficient', 'use_authtok use_first_pass', 1)
Managers\['PAM'].DelModule('pam_krb5.so', 'session')
Managers\['PAM'].AddModule('/lib/security/$ISA/pam_krb5.so', 'session', 'sufficient', None, 1)
Services\['Kerberos'] = "True"
def addomain(option, opt, value, parser):
Managers\['Kerberos'].SetKerberosRealm(value)
def addc(option, opt, value, parser):
Managers\['Kerberos'].SetActiveDirectoryDomain(value)
/code
You still need to create the users manually using one of the methods above.
Set the UID to 0 to give the user root privilege...
Ben
