Mercurial > prosody-modules
annotate mod_auth_pam/README.markdown @ 5296:0f5657db1cfc
mod_isolate_host: handle server-generated stanzas
The hook for setting the no_host_isolation is only called for c2s
sessions. This does not work for stanzas generated by the server,
such as PEP notifications or presence probe answers.
To handle that, we do per-stanza checks for the case that the origin
is local.
author | Jonas Schäfer <jonas@wielicki.name> |
---|---|
date | Sat, 01 Apr 2023 12:03:08 +0200 |
parents | d407397d05ca |
children |
rev | line source |
---|---|
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
1 --- |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
2 labels: |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
3 - 'Stage-Alpha' |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
4 - 'Type-Auth' |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
5 summary: PAM authentication module |
2504
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
6 --- |
1782 | 7 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
8 Introduction |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
9 ============ |
1782 | 10 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
11 This module makes Prosody authenticate users against PAM (Linux |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
12 Pluggable Authentication Modules) |
1782 | 13 |
2504
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
14 Dependencies |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
15 ============ |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
16 |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
17 The module depends on [lua-pam](https://github.com/devurandom/lua-pam) |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
18 and [LuaPosix](https://github.com/luaposix/luaposix). |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
19 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
20 Setup |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
21 ===== |
1782 | 22 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
23 Create a `/etc/pam.d/xmpp` with something like this: |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
24 |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
25 auth [success=1 default=ignore] pam_unix.so obscure sha512 nodelay |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
26 auth requisite pam_deny.so |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
27 auth required pam_permit.so |
1782 | 28 |
29 And switch authentication provider in the Prosody config: | |
30 | |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
31 authentication = "pam" |
1782 | 32 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
33 Compatibility |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
34 ============= |
1782 | 35 |
36 Compatible with 0.9 and up |