FM / html

/usr/share/doc/pam/html

Name	Size	Mode	Actions
Linux-PAM_SAG.html	9196	0644	edit dl rm
sag-author.html	3111	0644	edit dl rm
sag-configuration-directory.html	2966	0644	edit dl rm
sag-configuration-example.html	5522	0644	edit dl rm
sag-configuration-file.html	17519	0644	edit dl rm
sag-configuration.html	3065	0644	edit dl rm
sag-copyright.html	3617	0644	edit dl rm
sag-introduction.html	4446	0644	edit dl rm
sag-module-reference.html	38152	0644	edit dl rm
sag-overview.html	7995	0644	edit dl rm
sag-pam_access.html	18120	0644	edit dl rm
sag-pam_cracklib.html	20271	0644	edit dl rm
sag-pam_debug.html	8087	0644	edit dl rm
sag-pam_deny.html	4704	0644	edit dl rm
sag-pam_echo.html	5752	0644	edit dl rm
sag-pam_env.html	12796	0644	edit dl rm
sag-pam_exec.html	8371	0644	edit dl rm
sag-pam_faildelay.html	4590	0644	edit dl rm
sag-pam_filter.html	9342	0644	edit dl rm
sag-pam_ftp.html	6203	0644	edit dl rm
sag-pam_group.html	10136	0644	edit dl rm
sag-pam_issue.html	6378	0644	edit dl rm
sag-pam_keyinit.html	7015	0644	edit dl rm
sag-pam_lastlog.html	8524	0644	edit dl rm
sag-pam_limits.html	18114	0644	edit dl rm
sag-pam_listfile.html	10534	0644	edit dl rm
sag-pam_localuser.html	5446	0644	edit dl rm
sag-pam_loginuid.html	5209	0644	edit dl rm
sag-pam_mail.html	7762	0644	edit dl rm
sag-pam_mkhomedir.html	6196	0644	edit dl rm
sag-pam_motd.html	7753	0644	edit dl rm
sag-pam_namespace.html	20640	0644	edit dl rm
sag-pam_nologin.html	5332	0644	edit dl rm
sag-pam_permit.html	4304	0644	edit dl rm
sag-pam_pwhistory.html	8476	0644	edit dl rm
sag-pam_rhosts.html	6404	0644	edit dl rm
sag-pam_rootok.html	5109	0644	edit dl rm
sag-pam_securetty.html	6480	0644	edit dl rm
sag-pam_selinux.html	8313	0644	edit dl rm
sag-pam_shells.html	4261	0644	edit dl rm
sag-pam_succeed_if.html	9154	0644	edit dl rm
sag-pam_time.html	9725	0644	edit dl rm
sag-pam_timestamp.html	6889	0644	edit dl rm
sag-pam_umask.html	6318	0644	edit dl rm
sag-pam_unix.html	15056	0644	edit dl rm
sag-pam_userdb.html	8585	0644	edit dl rm
sag-pam_warn.html	4569	0644	edit dl rm
sag-pam_wheel.html	7181	0644	edit dl rm
sag-pam_xauth.html	8420	0644	edit dl rm
sag-security-issues-other.html	2993	0644	edit dl rm
sag-security-issues-wrong.html	2963	0644	edit dl rm
sag-security-issues.html	2161	0644	edit dl rm
sag-see-also.html	2283	0644	edit dl rm
sag-text-conventions.html	3187	0644	edit dl rm

Edit: /usr/share/doc/pam/html/sag-overview.html (7995B)

<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Chapter 3. Overview</title><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot"><link rel="home" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-text-conventions.html" title="Chapter 2. Some comments on the text"><link rel="next" href="sag-configuration.html" title="Chapter 4. The Linux-PAM configuration file"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 3. Overview</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-text-conventions.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="sag-configuration.html">Next</a></td></tr></table><hr></div><div class="chapter"><div class="titlepage"><div><div><h1 class="title"><a name="sag-overview"></a>Chapter 3. Overview</h1></div></div></div>
 For the uninitiated, we begin by considering an example. We take an
 application that grants some service to users;
 login is one such program.
 Login does two things, it first establishes that
 the requesting user is whom they claim to be and second provides
 them with the requested service: in the case of
 login the service is a command shell
 (bash, tcsh, zsh, etc.) running with the identity of the user.
 
 Traditionally, the former step is achieved by the
 login application prompting the user for a
 password and then verifying that it agrees with that located on
 the system; hence verifying that as far as the system is concerned
 the user is who they claim to be. This is the task that is delegated
 to Linux-PAM.
 
 From the perspective of the application programmer (in this case
 the person that wrote the login application),
 Linux-PAM takes care of this
 authentication task -- verifying the identity of the user.
 
 The flexibility of Linux-PAM is
 that you, the system administrator, have
 the freedom to stipulate which authentication scheme is to be
 used. You have the freedom to set the scheme for any/all
 PAM-aware applications on your Linux system. That is, you can
 authenticate from anything as naive as
 simple trust (pam_permit)
 to something as paranoid as a combination of a retinal scan, a
 voice print and a one-time password!
 
 To illustrate the flexibility you face, consider the following
 situation: a system administrator (parent) wishes to improve the
 mathematical ability of her users (children). She can configure
 their favorite ``Shoot 'em up game'' (PAM-aware of course) to
 authenticate them with a request for the product of a couple of
 random numbers less than 12. It is clear that if the game is any
 good they will soon learn their
 multiplication tables. As they mature, the
 authentication can be upgraded to include (long) division!
 
 Linux-PAM deals with four
 separate types of (management) task. These are:
 authentication management;
 account management;
 session management; and
 password management.
 The association of the preferred management scheme with the behavior
 of an application is made with entries in the relevant
 Linux-PAM configuration file.
 The management functions are performed by modules
 specified in the configuration file. The syntax for this
 file is discussed in the section
 <a class="link" href="sag-configuration.html" title="Chapter 4. The Linux-PAM configuration file">below</a>.
 
 Here is a figure that describes the overall organization of
 Linux-PAM:
 <pre class="programlisting">
 +----------------+
 | application: X |
 +----------------+ / +----------+ +================+
 | authentication-[----&gt;--\--] Linux- |--&lt;--| PAM config file|
 | + [----&lt;--/--] PAM | |================|
 |[conversation()][--+ \ | | | X auth .. a.so |
 +----------------+ | / +-n--n-----+ | X auth .. b.so |
 | | | __| | | _____/
 | service user | A | | |____,-----'
 | | | V A
 +----------------+ +------|-----|---------+ -----+------+
 +---u-----u----+ | | |
 | auth.... |--[ a ]--[ b ]--[ c ]
 +--------------+
 | acct.... |--[ b ]--[ d ]
 +--------------+
 | password |--[ b ]--[ c ]
 +--------------+
 | session |--[ e ]--[ c ]
 +--------------+
 </pre>
 By way of explanation, the left of the figure represents the
 application; application X. Such an application interfaces with the
 Linux-PAM library and knows none of
 the specifics of its configured authentication method. The
 Linux-PAM library (in the center)
 consults the contents of the PAM configuration file and loads the
 modules that are appropriate for application-X. These modules fall
 into one of four management groups (lower-center) and are stacked in
 the order they appear in the configuration file. These modules, when
 called by Linux-PAM, perform the
 various authentication tasks for the application. Textual information,
 required from/or offered to the user, can be exchanged through the
 use of the application-supplied conversation
 function.
 
 If a program is going to use PAM, then it has to have PAM
 functions explicitly coded into the program. If you have
 access to the source code you can add the appropriate PAM
 functions. If you do not have access to the source code, and
 the binary does not have the PAM functions included, then
 it is not possible to use PAM.
 </div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="sag-text-conventions.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="sag-configuration.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 2. Some comments on the text </td><td width="20%" align="center"><a accesskey="h" href="Linux-PAM_SAG.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 4. The Linux-PAM configuration file</td></tr></table></div></body></html>

cmd: