Linux PAM
Appearance
Stable release | 1.5.3
/ May 8, 2023 |
---|---|
Repository | https://github.com/linux-pam/linux-pam |
Written in | C |
Operating system | Linux |
Type | authentication |
License | GNU General Public LicenseorModified BSD License |
Website | www |
Linux Pluggable Authentication Modules(PAM) is a suite of libraries that allow a Linuxsystem administratorto configure methods toauthenticateusers. It provides a flexible and centralized way to switch authentication methods for secured applications by using configuration files instead of changing application code.[1]There are Linux PAM libraries allowing authentication using methods such as local passwords,LDAP,or fingerprint readers.[2]Linux PAM is evolved from theUnixPluggable Authentication Modulesarchitecture.[3]
Linux-PAM separates the tasks of authentication into four independent management groups:[4]
- account modules check that the specified account is a valid authentication target under current conditions. This may include conditions like account expiration, time of day, and that the user has access to the requested service.
- authentication modules verify the user's identity, for example by requesting and checking a password or other secret. They may also pass authentication information on to other systems like akeyring.
- password modules are responsible for updating passwords, and are generally coupled to modules employed in the authentication step. They may also be used to enforce strong passwords.
- session modules define actions that are performed at the beginning and end of sessions. A session starts after the user has successfully authenticated.
See also
[edit]References
[edit]- ^"Chapter 1. Introduction".An Internet Archive page of Linux PAM site.Archived fromthe originalon 2021-05-06.Retrieved2023-11-11.
- ^Lauber, Susan (2020-07-22)."An introduction to Pluggable Authentication Modules (PAM) in Linux".Red Hat.Retrieved2021-02-28.
- ^Fernandes, Savio; Reddy, KLM."Securing Applications on Linux with PAM | Linux Journal".Linux Journal.Retrieved2018-09-30.
- ^"pam.d(8): Pluggable Authentication Modules for - Linux man page".linux.die.net.Retrieved2021-02-28.
External links
[edit]- Primary distribution site for the Linux-PAM project
- Development site for the Linux-PAM project
- Understanding PAM,by A.P. Lawrence
- Linux PAM modules,by Mokhtar Ebrahim