Mercurial > prosody-modules
annotate mod_auth_pam/README.markdown @ 5406:b86d80e21c60
mod_http_oauth2: Validate consistency of response and grant types
Ensure that these correlated fields make sense per RFC 7591 ยง 2.1, even
though we currently only check the response type during authorization.
This could probably all be deleted if (when!) we remove the implicit
grant, since then these things don't make any sense anymore.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Tue, 02 May 2023 16:34:31 +0200 |
parents | d407397d05ca |
children |
rev | line source |
---|---|
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
1 --- |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
2 labels: |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
3 - 'Stage-Alpha' |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
4 - 'Type-Auth' |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
5 summary: PAM authentication module |
2504
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
6 --- |
1782 | 7 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
8 Introduction |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
9 ============ |
1782 | 10 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
11 This module makes Prosody authenticate users against PAM (Linux |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
12 Pluggable Authentication Modules) |
1782 | 13 |
2504
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
14 Dependencies |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
15 ============ |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
16 |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
17 The module depends on [lua-pam](https://github.com/devurandom/lua-pam) |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
18 and [LuaPosix](https://github.com/luaposix/luaposix). |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
19 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
20 Setup |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
21 ===== |
1782 | 22 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
23 Create a `/etc/pam.d/xmpp` with something like this: |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
24 |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
25 auth [success=1 default=ignore] pam_unix.so obscure sha512 nodelay |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
26 auth requisite pam_deny.so |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
27 auth required pam_permit.so |
1782 | 28 |
29 And switch authentication provider in the Prosody config: | |
30 | |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
31 authentication = "pam" |
1782 | 32 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
33 Compatibility |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
34 ============= |
1782 | 35 |
36 Compatible with 0.9 and up |