This is an old revision of this page, as edited by 46.59.60.227(talk) at 11:43, 24 August 2014(Correction using word authentication instead of auhtorization). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.
Revision as of 11:43, 24 August 2014 by 46.59.60.227(talk)(Correction using word authentication instead of auhtorization)
Linux Pluggable Authentication Modules (PAM) provide dynamic authentication support for applications and services in a Linux system. Linux PAM is evolved from the UnixPluggable Authentication Modules architecture.
Linux-PAM separates the tasks of authentication into four independent management groups:
account modules check that the specified account is a valid authentication target under current conditions. This may include conditions like account expiration, time of day, and that the user has access to the requested service.
authentication modules verify the user's identity, for example by requesting and checking a password or other secret. They may also pass authentication information on to other systems like a keyring.
password modules are responsible for updating passwords, and are generally coupled to modules employed in the authentication step. They may also be used to enforce strong passwords.
session modules define actions that are performed at the beginning and end of sessions. A session starts after the user has successfully authenticated.
