From owner-freebsd-isp Sat Dec 29 11: 5:11 2001 Delivered-To: freebsd-isp@freebsd.org Received: from catalyst.sasknow.net (catalyst.sasknow.net [207.195.92.130]) by hub.freebsd.org (Postfix) with ESMTP id 6074237B405 for ; Sat, 29 Dec 2001 11:05:07 -0800 (PST) Received: from localhost (ryan@localhost) by catalyst.sasknow.net (8.11.6/8.11.6) with ESMTP id fBTJ53U10686; Sat, 29 Dec 2001 13:05:04 -0600 (CST) (envelope-from ryan@sasknow.com) X-Authentication-Warning: catalyst.sasknow.net: ryan owned process doing -bs Date: Sat, 29 Dec 2001 13:05:03 -0600 (CST) From: Ryan Thompson X-X-Sender: To: Noah Davidson Cc: Subject: Re: PAM In-Reply-To: Message-ID: <20011229130021.F99302-100000@catalyst.sasknow.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Noah Davidson wrote to freebsd-isp@FreeBSD.ORG: > [...] > users authenticate? Does PAM authenticate the users, or does PAM > use something else to actually authenticate like mysql. Can > [...] The latter; PAM is built around a series of modules (/usr/lib/pam_*.so) that provide authentication services. PAM modules can authenticate against the UNIX password file (pam_unix.so), Kerberos, MySQL (pam_mysql.so.. /usr/ports/security/pam-mysql), etc. Applications that support PAM basically just use the library with a standard set of calls to request authentication. Which PAM module(s) is/are used to authenticate a user is defined, on a per-service basis, in /etc/pam.conf I'm sure this is all documented somewhere... man 5 pam.conf would be a good place to start. - Ryan -- Ryan Thompson Network Administrator, Accounts SaskNow Technologies - http://www.sasknow.com #106-380 3120 8th St E - Saskatoon, SK - S7H 0W2 Tel: 306-664-3600 Fax: 306-664-1161 Saskatoon Toll-Free: 877-727-5669 (877-SASKNOW) North America To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message