Differences

This shows you the differences between two versions of the page.

--- ubuntu:pam_pluggable_authentication_module [2019/12/01 12:17] – peter
+++ ubuntu:pam_pluggable_authentication_module [2020/07/15 09:30] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
 ====== PAM (Pluggable authentication module) ======
-[[PAM:pam_passwdqc|pam_passwdqc]]
+PAM is a suite of shared libraries that enable the local system administrator to choose how applications authenticate users.
+In other words, without (rewriting and) recompiling a PAM-aware application, it is possible to switch between the authentication mechanism(s) it uses.  One may entirely upgrade the local authentication system without touching the applications themselves.
+This PAM library is configured locally with a system file, /etc/pam.conf (or a series of configuration files located in /etc/pam.d/) to authenticate a user request via the locally available authentication modules.
+The modules themselves will usually be located in the directory /lib/security or /lib64/security and take the form of dynamically loadable object files.  See dlopen(3)).
+PAM deals with four separate types of (management) task:
+  * authentication management
+  * account management
+  * session management
+  * password management
+These are handled in the relevant Linux-PAM configuration file.
+The actual management functions are performed by modules specified in the configuration file.
+<WRAP info>
+If a program is going to use PAM, then it has to have PAM functions explicitly coded into the program.
+If a program does not have the PAM functions included, then it is not possible to use PAM.
+</WRAP>
+----
+[[Ubuntu:PAM:Check is a program can use PAM|Check is a program can use PAM]]
+[[Ubuntu:PAM:Configure PAM|Configure PAM]]
+[[Ubuntu:PAM:Configure PAM Advanced|Configure PAM Advanced]]
+[[Ubuntu:PAM:Disable PAM for a group|Disable PAM for a group]]
+[[Ubuntu:PAM:Find all programs that use PAM|Find all programs that use PAM]]
+[[Ubuntu:PAM:PAM Modules|PAM Modules]]
 [[Ubuntu:PAM:pam_passwdqc|pam_passwdqc]]
+[[Ubuntu:PAM:Restrict root Access to SSH Service|Restrict root Access to SSH Service]]