source: postlfs/security/linux_pam.xml@ c6b985c

10.0 10.1 11.0 6.0 6.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 ken/refactor-virt krejzi/svn lazarus nosym perl-modules qt5new systemd-11177 systemd-13485 trunk upgradedb xry111/git-date xry111/git-date-for-trunk xry111/git-date-test
Last change on this file since c6b985c was c6b985c, checked in by Randy McMurchy <randy@…>, 17 years ago

Added additional installed directories to Linux-PAM description

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@3489 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 7.3 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
3 "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY Linux_PAM-download-http "http://www.kernel.org/pub/linux/libs/pam/pre/library/Linux-PAM-&Linux_PAM-version;.tar.bz2">
8 <!ENTITY Linux_PAM-download-ftp "ftp://ftp.kernel.org/pub/linux/libs/pam/pre/library/Linux-PAM-&Linux_PAM-version;.tar.bz2">
9 <!ENTITY Linux_PAM-md5sum "34938b4f2449d4d3b2ffdbf354257205">
10 <!ENTITY Linux_PAM-size "364 KB">
11 <!ENTITY Linux_PAM-buildsize "6.1 MB">
12 <!ENTITY Linux_PAM-time "0.07 SBU">
13]>
14
15<sect1 id="Linux_PAM" xreflabel="Linux-PAM-&Linux_PAM-version;">
16<sect1info>
17<othername>$LastChangedBy$</othername>
18<date>$Date$</date>
19</sect1info>
20<?dbhtml filename="linux_pam.html"?>
21<title>Linux-PAM-&Linux_PAM-version;</title>
22<indexterm zone="Linux_PAM">
23<primary sortas="a-PAM_linux">PAM(Linux)</primary></indexterm>
24
25<sect2>
26<title>Introduction to <application>Linux-<acronym>PAM</acronym></application>
27</title>
28
29<para>The <application>Linux-<acronym>PAM</acronym></application> package
30contains Pluggable Authentication Modules. This is useful to enable the local
31system administrator to choose how applications authenticate users.</para>
32
33<sect3><title>Package information</title>
34<itemizedlist spacing='compact'>
35<listitem><para>Download (HTTP): <ulink
36url="&Linux_PAM-download-http;"/></para></listitem>
37<listitem><para>Download (FTP): <ulink
38url="&Linux_PAM-download-ftp;"/></para></listitem>
39<listitem><para>Download MD5 sum: &Linux_PAM-md5sum;</para></listitem>
40<listitem><para>Download size: &Linux_PAM-size;</para></listitem>
41<listitem><para>Estimated disk space required:
42&Linux_PAM-buildsize;</para></listitem>
43<listitem><para>Estimated build time:
44&Linux_PAM-time;</para></listitem></itemizedlist>
45</sect3>
46
47<sect3><title>Additional download</title>
48<itemizedlist spacing='compact'>
49<listitem><para>Required Patch: <ulink
50url="&patch-root;/Linux-PAM-&Linux_PAM-version;-linkage-2.patch"/></para>
51</listitem></itemizedlist>
52</sect3>
53
54<sect3><title><application>Linux-<acronym>PAM</acronym></application>
55dependencies</title>
56<sect4><title>Required</title>
57<para><xref linkend="cracklib"/></para>
58</sect4>
59
60<sect4><title>Optional</title>
61<para><ulink
62url="http://sourceforge.net/projects/sgmltools-lite/">sgmltools-lite</ulink>
63and <xref linkend="db"/> (for pam_userdb module)</para>
64</sect4>
65</sect3>
66
67</sect2>
68
69<sect2>
70<title>Installation of
71<application>Linux-<acronym>PAM</acronym></application></title>
72
73<para>Install <application>Linux-<acronym>PAM</acronym></application> by
74running the following commands:</para>
75
76<screen><userinput><command>patch -Np1 -i ../Linux-PAM-&Linux_PAM-version;-linkage-2.patch &amp;&amp;
77autoconf &amp;&amp;
78./configure --enable-static-libpam --with-mailspool=/var/mail \
79 --enable-read-both-confs --sysconfdir=/etc &amp;&amp;
80make</command></userinput></screen>
81
82<para>Now, as the root user:</para>
83
84<screen><userinput role='root'><command>make install &amp;&amp;
85mv /lib/libpam.a /lib/libpam_misc.a /lib/libpamc.a /usr/lib &amp;&amp;
86ln -sf ../../lib/libpam.so.&Linux_PAM-version; /usr/lib/libpam.so &amp;&amp;
87ln -sf ../../lib/libpam_misc.so.&Linux_PAM-version; /usr/lib/libpam_misc.so &amp;&amp;
88ln -sf ../../lib/libpamc.so.&Linux_PAM-version; /usr/lib/libpamc.so</command></userinput></screen>
89
90</sect2>
91
92<sect2>
93<title>Command explanations</title>
94
95<para><command>autoconf</command>: This is necessary because the patch
96changes where <acronym>PAM</acronym> looks for the
97<application>cracklib</application> libraries, requiring regeneration of the
98configure script.</para>
99
100<para><option>--enable-static-libpam</option>: This switch builds
101static <acronym>PAM</acronym> libraries as well as the dynamic libraries.</para>
102
103<para><parameter>--with-mailspool=/var/mail</parameter>: This switch makes
104the mailspool directory <acronym>FHS</acronym> compliant.</para>
105
106<para><option>--enable-read-both-confs</option>: This switch lets the local
107administrator choose which configuration file setup to use.</para>
108
109<para><command>mv /lib/libpam.a /lib/libpam_misc.a /lib/libpamc.a
110/usr/lib</command>: This command moves the static libraries to
111<filename>/usr/lib</filename> to comply with <acronym>FHS</acronym>
112guidelines.</para>
113
114</sect2>
115
116<sect2>
117<title>Configuring
118<application>Linux-<acronym>PAM</acronym></application></title>
119
120<sect3 id="pam-config"><title>Config files</title>
121<para><filename>/etc/pam.d/*</filename> or
122<filename>/etc/pam.conf</filename></para>
123<indexterm zone="Linux_PAM pam-config">
124<primary sortas="e-etc-pam.d">/etc/pam.d/*</primary></indexterm>
125<indexterm zone="Linux_PAM pam-config">
126<primary sortas="e-etc-pam.conf">/etc/pam.conf</primary></indexterm>
127</sect3>
128
129<sect3><title>Configuration Information</title>
130
131<para>Configuration information is placed in
132<filename class='directory'>/etc/pam.d/</filename> or
133<filename>/etc/pam.conf</filename> depending on user preference. Below are
134example files of each type:</para>
135
136<screen># Begin /etc/pam.d/other
137
138auth required pam_unix.so nullok
139account required pam_unix.so
140session required pam_unix.so
141password required pam_unix.so nullok
142
143# End /etc/pam.d/other
144
145# Begin /etc/pam.conf
146
147other auth required pam_unix.so nullok
148other account required pam_unix.so
149other session required pam_unix.so
150other password required pam_unix.so nullok
151
152# End /etc/pam.conf</screen>
153
154<para>The <application><acronym>PAM</acronym></application> man page
155(<command>man pam</command>) provides a good starting point for descriptions
156of fields and allowable entries. The
157<ulink url="http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/pam.html">
158Linux-PAM guide for system administrators</ulink>
159is recommended for further reading.</para>
160
161<para>Refer to
162<ulink url="http://www.kernel.org/pub/linux/libs/pam/modules.html"/>
163for a list of various modules available.</para>
164
165<note><para>You should now reinstall the <xref linkend="shadow"/>
166package.</para></note>
167</sect3>
168
169</sect2>
170
171<sect2>
172<title>Contents</title>
173
174<segmentedlist>
175<segtitle>Installed Program</segtitle>
176<segtitle>Installed Libraries</segtitle>
177<segtitle>Installed Directories</segtitle>
178<seglistitem>
179<seg>unix_chkpwd and pam_tally</seg>
180<seg>libpam.[so,a], libpamc.[so,a] and libpam_misc.[so,a]</seg>
181<seg>/etc/pam.d, /etc/security, /lib/security and /usr/include/security</seg>
182</seglistitem>
183</segmentedlist>
184
185<variablelist>
186<bridgehead renderas="sect3">Short Descriptions</bridgehead>
187<?dbfo list-presentation="list"?>
188
189<varlistentry id="unix_chkpwd">
190<term><command>unix_chkpwd</command></term>
191<listitem><para>checks user passwords that are stored
192in read protected databases.</para>
193<indexterm zone="Linux_PAM unix_chkpwd">
194<primary sortas="b-unix_chkpwd">unix_chkpwd</primary></indexterm>
195</listitem>
196</varlistentry>
197
198<varlistentry id="libpam">
199<term><filename class='libraryfile'>libpam.[so,a]</filename></term>
200<listitem><para>provide the interfaces between applications and the
201<acronym>PAM</acronym> modules.</para>
202<indexterm zone="Linux_PAM libpam">
203<primary sortas="c-libpam">libpam.[so,a]</primary></indexterm>
204</listitem>
205</varlistentry>
206</variablelist>
207
208</sect2>
209
210</sect1>
211
Note: See TracBrowser for help on using the repository browser.