Mercurial > prosody-modules
annotate mod_auth_pam/README.markdown @ 5547:d4a2997deae9
mod_http_oauth2: Make CSP configurable
E.g. to enable forbidding all scripts if you don't use any scripts, or
allow scripts from your separate static content domain, etc.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sun, 11 Jun 2023 14:06:28 +0200 |
parents | d407397d05ca |
children |
rev | line source |
---|---|
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
1 --- |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
2 labels: |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
3 - 'Stage-Alpha' |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
4 - 'Type-Auth' |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
5 summary: PAM authentication module |
2504
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
6 --- |
1782 | 7 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
8 Introduction |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
9 ============ |
1782 | 10 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
11 This module makes Prosody authenticate users against PAM (Linux |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
12 Pluggable Authentication Modules) |
1782 | 13 |
2504
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
14 Dependencies |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
15 ============ |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
16 |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
17 The module depends on [lua-pam](https://github.com/devurandom/lua-pam) |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
18 and [LuaPosix](https://github.com/luaposix/luaposix). |
d407397d05ca
mod_auth_pam: Document dependencies
Kim Alvefur <zash@zash.se>
parents:
1803
diff
changeset
|
19 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
20 Setup |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
21 ===== |
1782 | 22 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
23 Create a `/etc/pam.d/xmpp` with something like this: |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
24 |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
25 auth [success=1 default=ignore] pam_unix.so obscure sha512 nodelay |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
26 auth requisite pam_deny.so |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
27 auth required pam_permit.so |
1782 | 28 |
29 And switch authentication provider in the Prosody config: | |
30 | |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
31 authentication = "pam" |
1782 | 32 |
1803
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
33 Compatibility |
4d73a1a6ba68
Convert all wiki pages to Markdown
Kim Alvefur <zash@zash.se>
parents:
1782
diff
changeset
|
34 ============= |
1782 | 35 |
36 Compatible with 0.9 and up |