Book Image

Pluggable Authentication Modules: The Definitive Guide to PAM for Linux SysAdmins and C Developers

By : Kenneth Geisshirt
Book Image

Pluggable Authentication Modules: The Definitive Guide to PAM for Linux SysAdmins and C Developers

By: Kenneth Geisshirt

Overview of this book

<p>PAM-aware applications reduce the complexity of authentication. With PAM you can use the same user database for every login process. PAM also supports different authentication processes as required. Moreover, PAM is a well-defined API, and PAM-aware applications will not break if you change the underlying authentication configuration.<br /><br />The PAM framework is widely used by most Linux distributions for authentication purposes. Originating from Solaris 2.6 ten years ago, PAM is used today by most proprietary and free UNIX operating systems including GNU/Linux, FreeBSD, and Solaris, following both the design concept and the practical details. PAM is thus a unifying technology for authentication mechanisms in UNIX. <br /><br />PAM is a modular and flexible authentication management layer that sits between Linux applications and the native underlying authentication system. PAM can be implemented with various applications without having to recompile the applications to specifically support PAM.</p>
Table of Contents (13 chapters)

Parameters


Many modules support a set of parameters across different PAM implementations. Knowing these parameters and their meaning can help us move between various UNIX platforms and use different modules.

debug

The debug parameter is probably the most used parameter, in particular during the implementation and testing phases of a new PAM configuration. The parameter can be used in all four management groups. As the name suggests, using this parameter turns on a debugging mode for the particular module.

Debugging in the context of PAM modules implies writing information to syslog about the progress of the work done by the module.

The syslog facility is the standard log facility on UNIX operating systems. A new implementation named syslog-ng (next generation) exists, and it provides better facilities for storing log messages on a central log server. Syslog-ng is not yet common but Debian and Ubuntu have packages in their repository for syslog-ng. It consists of a set of system calls and a daemon...