Linux PAM explained

Linux PAM
Linux PAM
Latest Release Version:	1.5.3
Programming Language:	C
Operating System:	Linux
Genre:	authentication
Repo:	https://github.com/linux-pam/linux-pam
License:	GNU General Public License or Modified BSD License

Linux Pluggable Authentication Modules (PAM) is a suite of libraries that allow a Linux system administrator to configure methods to authenticate users. It provides a flexible and centralized way to switch authentication methods for secured applications by using configuration files instead of changing application code.^[1] There are Linux PAM libraries allowing authentication using methods such as local passwords, LDAP, or fingerprint readers.^[2] Linux PAM is evolved from the Unix Pluggable Authentication Modules architecture.^[3]

Linux-PAM separates the tasks of authentication into four independent management groups:^[4]

• account modules check that the specified account is a valid authentication target under current conditions. This may include conditions like account expiration, time of day, and that the user has access to the requested service.
• authentication modules verify the user's identity, for example by requesting and checking a password or other secret. They may also pass authentication information on to other systems like a keyring.
• password modules are responsible for updating passwords, and are generally coupled to modules employed in the authentication step. They may also be used to enforce strong passwords.
• session modules define actions that are performed at the beginning and end of sessions. A session starts after the user has successfully authenticated.

See also

• Pluggable Authentication Modules
• OpenPAM

External links

• Primary distribution site for the Linux-PAM project
• Development site for the Linux-PAM project
• Understanding PAM, by A.P. Lawrence
• Linux PAM modules, by Mokhtar Ebrahim

Notes and References

1. Web site: Chapter 1. Introduction. 2023-11-11. An Internet Archive page of Linux PAM site. https://web.archive.org/web/20210506140423/http://www.linux-pam.org/Linux-PAM-html/sag-introduction.html . 2021-05-06 .
2. Web site: Lauber. Susan. 2020-07-22. An introduction to Pluggable Authentication Modules (PAM) in Linux. 2021-02-28. Red Hat. en.
3. Web site: Securing Applications on Linux with PAM Linux Journal. Fernandes. Savio. Reddy. KLM. Linux Journal. en. 2018-09-30.
4. Web site: pam.d(8): Pluggable Authentication Modules for - Linux man page. 2021-02-28. linux.die.net.