Software:Linux PAM

From HandWiki
Short description: Software library to manage authentication on Linux systems
Linux PAM
Stable release
1.5.3 / May 8, 2023; 14 months ago (2023-05-08)
Repositoryhttps://github.com/linux-pam/linux-pam
Written inC
Operating systemLinux
Typeauthentication
LicenseGNU General Public License or Modified BSD License
Websitewww.linux-pam.org

Linux Pluggable Authentication Modules (PAM) is a suite of libraries that allow a Linux system administrator to configure methods to authenticate users. It provides a flexible and centralized way to switch authentication methods for secured applications by using configuration files instead of changing application code.[1] There are Linux PAM libraries allowing authentication using methods such as local passwords, LDAP, or fingerprint readers.[2] Linux PAM is evolved from the Unix Pluggable Authentication Modules architecture.[3]

Linux-PAM separates the tasks of authentication into four independent management groups:[4]

  • account modules check that the specified account is a valid authentication target under current conditions. This may include conditions like account expiration, time of day, and that the user has access to the requested service.
  • authentication modules verify the user's identity, for example by requesting and checking a password or other secret. They may also pass authentication information on to other systems like a keyring.
  • password modules are responsible for updating passwords, and are generally coupled to modules employed in the authentication step. They may also be used to enforce strong passwords.
  • session modules define actions that are performed at the beginning and end of sessions. A session starts after the user has successfully authenticated.

See also

  • Pluggable Authentication Modules
  • OpenPAM

References

  1. ↑ "Chapter 1. Introduction". https://web.archive.org/web/20210506140423/http://www.linux-pam.org/Linux-PAM-html/sag-introduction.html. 
  2. ↑ Lauber, Susan (2020-07-22). "An introduction to Pluggable Authentication Modules (PAM) in Linux" (in en). https://www.redhat.com/sysadmin/pluggable-authentication-modules-pam. 
  3. ↑ Fernandes, Savio; Reddy, KLM. "Securing Applications on Linux with PAM | Linux Journal" (in en). https://www.linuxjournal.com/article/5940. 
  4. ↑ "pam.d(8): Pluggable Authentication Modules for - Linux man page". https://linux.die.net/man/8/pam.d. 

External links




Retrieved from "https://handwiki.org/wiki/index.php?title=Software:Linux_PAM&oldid=3454463"