source: postlfs/security/linux_pam.xml@ e8eb87c

10.0 10.1 11.0 6.0 6.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 ken/refactor-virt krejzi/svn lazarus nosym perl-modules qt5new systemd-11177 systemd-13485 trunk upgradedb xry111/git-date xry111/git-date-for-trunk xry111/git-date-test
Last change on this file since e8eb87c was e8eb87c, checked in by Larry Lawrence <larry@…>, 17 years ago

expanded MIT krb5 descriptions

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@3428 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 7.3 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
3 "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY Linux_PAM-download-http "http://www.kernel.org/pub/linux/libs/pam/pre/library/Linux-PAM-&Linux_PAM-version;.tar.bz2">
8 <!ENTITY Linux_PAM-download-ftp "ftp://ftp.kernel.org/pub/linux/libs/pam/pre/library/Linux-PAM-&Linux_PAM-version;.tar.bz2">
9 <!ENTITY Linux_PAM-md5sum "34938b4f2449d4d3b2ffdbf354257205">
10 <!ENTITY Linux_PAM-size "364 KB">
11 <!ENTITY Linux_PAM-buildsize "6.1 MB">
12 <!ENTITY Linux_PAM-time "0.07 SBU">
13]>
14
15<sect1 id="Linux_PAM" xreflabel="Linux-PAM-&Linux_PAM-version;">
16<sect1info>
17<othername>$LastChangedBy$</othername>
18<date>$Date$</date>
19</sect1info>
20<?dbhtml filename="linux_pam.html"?>
21<title>Linux-PAM-&Linux_PAM-version;</title>
22<indexterm zone="Linux_PAM">
23<primary sortas="a-PAM_linux">PAM(Linux)</primary></indexterm>
24
25<sect2>
26<title>Introduction to <application>Linux-<acronym>PAM</acronym></application>
27</title>
28
29<para>The <application>Linux-<acronym>PAM</acronym></application> package
30contains Pluggable Authentication Modules. This is useful to enable the local
31system administrator to choose how applications authenticate users.</para>
32
33<sect3><title>Package information</title>
34<itemizedlist spacing='compact'>
35<listitem><para>Download (HTTP): <ulink
36url="&Linux_PAM-download-http;"/></para></listitem>
37<listitem><para>Download (FTP): <ulink
38url="&Linux_PAM-download-ftp;"/></para></listitem>
39<listitem><para>Download MD5 sum: &Linux_PAM-md5sum;</para></listitem>
40<listitem><para>Download size: &Linux_PAM-size;</para></listitem>
41<listitem><para>Estimated disk space required:
42&Linux_PAM-buildsize;</para></listitem>
43<listitem><para>Estimated build time:
44&Linux_PAM-time;</para></listitem></itemizedlist>
45</sect3>
46
47<sect3><title>Additional download</title>
48<itemizedlist spacing='compact'>
49<listitem><para>Required Patch: <ulink
50url="&patch-root;/Linux-PAM-&Linux_PAM-version;-linkage-2.patch"/></para>
51</listitem></itemizedlist>
52</sect3>
53
54<sect3><title><application>Linux-<acronym>PAM</acronym></application>
55dependencies</title>
56<sect4><title>Required</title>
57<para><xref linkend="cracklib"/>
58</para></sect4>
59<sect4><title>Optional</title>
60<para><ulink
61url="http://sourceforge.net/projects/sgmltools-lite/">sgmltools-lite</ulink>
62and <xref linkend="db"/> (for pam_userdb module)
63</para></sect4>
64</sect3>
65
66</sect2>
67
68<sect2>
69<title>Installation of <application>Linux-<acronym>PAM</acronym></application>
70</title>
71
72<para>Install <application>Linux-<acronym>PAM</acronym></application> by
73running the following commands:</para>
74
75<screen><userinput><command>patch -Np1 -i ../Linux-PAM-&Linux_PAM-version;-linkage-2.patch &amp;&amp;
76autoconf &amp;&amp;
77./configure --enable-static-libpam --with-mailspool=/var/mail \
78 --enable-read-both-confs --sysconfdir=/etc &amp;&amp;
79make</command></userinput></screen>
80
81<para>Now, as the root user:</para>
82
83<screen><userinput role='root'><command>make install &amp;&amp;
84mv /lib/libpam.a /lib/libpam_misc.a /lib/libpamc.a /usr/lib &amp;&amp;
85ln -sf ../../lib/libpam.so.&Linux_PAM-version; /usr/lib/libpam.so &amp;&amp;
86ln -sf ../../lib/libpam_misc.so.&Linux_PAM-version; /usr/lib/libpam_misc.so &amp;&amp;
87ln -sf ../../lib/libpamc.so.&Linux_PAM-version; /usr/lib/libpamc.so</command></userinput></screen>
88
89</sect2>
90
91<sect2>
92<title>Command explanations</title>
93
94<para><command>autoconf</command>: This is necessary because the patch
95changes where <acronym>PAM</acronym> looks for the
96<application>cracklib</application> libraries, requiring regeneration of the
97configure script.</para>
98
99<para><option>--enable-static-libpam</option>: This switch builds
100static <acronym>PAM</acronym> libraries as well as the dynamic libraries.</para>
101
102<para><parameter>--with-mailspool=/var/mail</parameter>: This switch makes
103the mailspool directory <acronym>FHS</acronym> compliant.</para>
104
105<para><option>--enable-read-both-confs</option>: This switch lets the local
106administrator choose which configuration file setup to use.</para>
107
108<para><command>mv /lib/libpam.a /lib/libpam_misc.a /lib/libpamc.a
109/usr/lib</command>: This command moves the static libraries to
110<filename>/usr/lib</filename> to comply with <acronym>FHS</acronym>
111guidelines.</para>
112
113</sect2>
114
115<sect2>
116<title>Configuring <application>Linux-<acronym>PAM</acronym></application>
117</title>
118
119<sect3 id="pam-config"><title>Config files</title>
120<para><filename>/etc/pam.d/*</filename> or
121<filename>/etc/pam.conf</filename></para>
122<indexterm zone="Linux_PAM pam-config">
123<primary sortas="e-etc-pam.d">/etc/pam.d/*</primary></indexterm>
124<indexterm zone="Linux_PAM pam-config">
125<primary sortas="e-etc-pam.conf">/etc/pam.conf</primary></indexterm>
126</sect3>
127
128<sect3><title>Configuration Information</title>
129
130<para>Configuration information is placed in
131<filename class='directory'>/etc/pam.d/</filename> or
132<filename>/etc/pam.conf</filename> depending on user preference. Below are
133example files of each type:</para>
134
135<screen># Begin /etc/pam.d/other
136
137auth required pam_unix.so nullok
138account required pam_unix.so
139session required pam_unix.so
140password required pam_unix.so nullok
141
142# End /etc/pam.d/other
143
144# Begin /etc/pam.conf
145
146other auth required pam_unix.so nullok
147other account required pam_unix.so
148other session required pam_unix.so
149other password required pam_unix.so nullok
150
151# End /etc/pam.conf</screen>
152
153<para>The <application><acronym>PAM</acronym></application> man page
154(<command>man pam</command>) provides a good starting point for descriptions
155of fields and allowable entries. The
156<ulink url="http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/pam.html">
157Linux-PAM guide for system administrators</ulink>
158is recommended for further reading.</para>
159
160<para>Refer to
161<ulink url="http://www.kernel.org/pub/linux/libs/pam/modules.html"/>
162for a list of various modules available.</para>
163
164<note><para>You should now reinstall the <xref linkend="shadow"/>
165package.</para></note>
166</sect3>
167
168</sect2>
169
170<sect2>
171<title>Contents</title>
172
173<segmentedlist>
174<segtitle>Installed Program</segtitle>
175<segtitle>Installed Libraries</segtitle>
176<segtitle>Installed Directories</segtitle>
177<seglistitem>
178<seg>unix_chkpwd and pam_tally</seg>
179<seg>libpam.[so,a], libpamc.[so,a] and libpam_misc.[so,a]</seg>
180<seg>/etc/pam.d and /lib/security</seg>
181</seglistitem>
182</segmentedlist>
183
184<variablelist>
185<bridgehead renderas="sect3">Short Descriptions</bridgehead>
186<?dbfo list-presentation="list"?>
187
188<varlistentry id="unix_chkpwd">
189<term><command>unix_chkpwd</command></term>
190<listitem><para>checks user passwords that are stored
191in read protected databases.</para>
192<indexterm zone="Linux_PAM unix_chkpwd">
193<primary sortas="b-unix_chkpwd">unix_chkpwd</primary></indexterm>
194</listitem>
195</varlistentry>
196
197<varlistentry id="libpam">
198<term><filename class='libraryfile'>libpam.[so,a]</filename></term>
199<listitem><para>provide the interfaces between applications and the
200<acronym>PAM</acronym> modules.</para>
201<indexterm zone="Linux_PAM libpam">
202<primary sortas="c-libpam">libpam.[so,a]</primary></indexterm>
203</listitem>
204</varlistentry>
205</variablelist>
206
207</sect2>
208
209</sect1>
210
Note: See TracBrowser for help on using the repository browser.