ззыж
> 2.2.1. Какими другими средствами можно реализовать удобную аутентификацию с множеством сервисов (smtp, imap, nfs4, ldap, http, proxy, ssh, cups, ...)?

$ man pam_krb5
NAME
       pam_krb5 - Kerberos PAM module

SYNOPSIS
         auth            sufficient      pam_krb5.so minimum_uid=1000
         session         required        pam_krb5.so minimum_uid=1000
         account         required        pam_krb5.so minimum_uid=1000
         password        sufficient      pam_krb5.so minimum_uid=1000

DESCRIPTION
       The Kerberos service module for PAM, typically installed at /lib/security/pam_krb5.so, provides functionality for the four PAM operations: authentication, account management, session management, and password management.