If each Linux program had to include its own authentication logic, we'd go crazy. How could you trust that all your applications implemented the same checks? And how could you implement extra controls? PAM gives us a simple alternative: if a program needs to authenticate a user, it can call the PAM application programming interface, and that API will take care of running whatever checks you need, according to whatever rules you specify in your PAM configuration files. You can even modify your authentication mechanisms on the fly, and all PAM-aware applications will automatically start using the new authentication method. Want to use biometric controls, such as fingerprint readers or iris scanners? If the hardware maker provides a PAM, you are set; you just have to include that module in your configuration files, and from that point on your new device will be available for all applications.
by
bobodod
2009-03-14 11:18
computers
·
Linux
·
security
·
tools
·
software
·
sysadmin
·
Unix
·
kernel
·
PAM
·
authentication
·
tech
·
open_source
·
article
·
tutorial
simpy
