PAM Modules Listing
This is a list of Open Source PAM modules that I think might be useful. One of the things thats been driving me nuts lately is the lack of a place for me to go to find out what PAM modules are actually available out there for use on Unix-like OS’s.. So, I figured I would start my own list and maybe others might find it useful.
For those of you who don’t know what it is. Here is a link to the wikipedia entry for PAM. Here
Linux Journal also has a great article about PAM and what it is. It can be found here.
This list will keep growing as I find more. This is just the Start.
I got a lot of them straight from Sourceforge.
PAM Sessionrun - PAM Sessionrun is a PAM module that can run a script on the start and stop of a PAM session. The script is provided the username and password (if available) of the user when it is ran. Can be used for login/logout scripts and restricting system access.
Ruby/PAM - This project aims to provide an interoperability between Ruby and PAM. Ruby/PAM is a ruby binding for PAM library, and PAM/Ruby is a PAM module which enable us to write an authentication module in Ruby.
pam_chroot - pam_chroot is a Linux-PAM module that allows a user to be chrooted in auth, account, or session. The pam_chroot configuration employs a flexible syntax which allows for a user to be selectively chrooted based upon username or group membership.
PAM login module for JAAS - Java bridge (bindings, interface) to PAM. JAAS login module using PAM for authentication.
pam_cifs - pam_cifs is a Linux-PAM module to mount and unmount CIFS shares on login on a per-user basis
pam-html - pam-html is a pam module to do pam authentication over the HTTP protocol. In contrary to pam-http it doesn’t use a http-auth request but passes the parameters in the GET method.
PAM_PKA - PAM_PKA is a a PAM authentication module, enabling the use of cheap removable media for token authentication. PAM_PKA uses the DSA algorithm to perform public key authentication to verify the identity of the user requesting access rights.
pam_ibmdb2 - pam_ibmdb2 is a PAM module for IBM DB2 that allows people to login to PAM aware applications by authenticating to an IBM DB2 database.
pam_mount module - pam_mount is a Pluggable Authentication Module that can mount volumes for a user session. Supports any filesystem your kernel is capable of, including tmpfs, FUSE, smbfs, cryptoloop, LUKS mounts, –bind and more.
pam_smbmount - Pam_smbmount is software for mounting file systems for user session. Currently smbfs and any file systems that does not require user password for mounting(ext2, ntfs, …) are supported.
PAM Cache - This is a PAM Module that cache credentials in local passwd databases.
pam_usb - pam_usb provides hardware authentication for Linux using ordinary USB Flash Drives.
checkpassword-pam - Implementation of checkpassword-compatible PAM authentication program. Details on “checkpassword” interface are available at http://cr.yp.to/checkpwd.html
libpam-pgsql - PAM module to authenticate using a PostgreSQL database This module lets you authenticate users against a table in a PostgreSQL database. It also supports: - Checking account information (pam_acct_expired,new_authtok_reqd) - Updating auth to
PAM_IMAP - PAM module that authenticates against a remote IMAP or IMAPS server. Supports multiple servers, SSL, password caching, user blacklists, and many configuration abilities.
PAM X509 - PAM module which will authenticate user by X509 certificates. Keys must be provided in some automountable location. As storage may be used usb steaks, bluetooth storage devices… Mainly intended for password-less authentication on single user clients pc
pam_ldap_extenstions - pam_ldap extensions and tools. Here you will find several patches for pam_ldap adding features like time-based login, restriction of login-count and comand-line tools to maintain useraccounts.
pam_ldap - The pam_ldap module provides the means for Solaris and Linux servers and workstations to authenticate against LDAP directories, and to change their passwords in the directory.
More to come. (ill keep adding to this list).