author | Kim Alvefur <zash@zash.se> |
Sat, 25 Jan 2020 01:31:49 +0100 | |
changeset 3861 | 8752e5b5dd08 |
parent 2508 | d407397d05ca |
permissions | -rw-r--r-- |
1807
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
1 |
--- |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
2 |
labels: |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
3 |
- 'Stage-Alpha' |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
4 |
- 'Type-Auth' |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
5 |
summary: PAM authentication module |
2508
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1807
diff
changeset
|
6 |
--- |
1786 | 7 |
|
1807
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
8 |
Introduction |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
9 |
============ |
1786 | 10 |
|
1807
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
11 |
This module makes Prosody authenticate users against PAM (Linux |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
12 |
Pluggable Authentication Modules) |
1786 | 13 |
|
2508
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1807
diff
changeset
|
14 |
Dependencies |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1807
diff
changeset
|
15 |
============ |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1807
diff
changeset
|
16 |
|
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1807
diff
changeset
|
17 |
The module depends on [lua-pam](https://github.com/devurandom/lua-pam) |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1807
diff
changeset
|
18 |
and [LuaPosix](https://github.com/luaposix/luaposix). |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1807
diff
changeset
|
19 |
|
1807
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
20 |
Setup |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
21 |
===== |
1786 | 22 |
|
1807
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
23 |
Create a `/etc/pam.d/xmpp` with something like this: |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
24 |
|
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
25 |
auth [success=1 default=ignore] pam_unix.so obscure sha512 nodelay |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
26 |
auth requisite pam_deny.so |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
27 |
auth required pam_permit.so |
1786 | 28 |
|
29 |
And switch authentication provider in the Prosody config: |
|
30 |
||
1807
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
31 |
authentication = "pam" |
1786 | 32 |
|
1807
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
33 |
Compatibility |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1786
diff
changeset
|
34 |
============= |
1786 | 35 |
|
36 |
Compatible with 0.9 and up |