Index: openacs-4/packages/acs-authentication/www/doc/ext-auth-pam-install.adp =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-authentication/www/doc/ext-auth-pam-install.adp,v diff -u -r1.1.2.2 -r1.1.2.3 --- openacs-4/packages/acs-authentication/www/doc/ext-auth-pam-install.adp 25 Aug 2015 18:02:01 -0000 1.1.2.2 +++ openacs-4/packages/acs-authentication/www/doc/ext-auth-pam-install.adp 9 Jun 2016 13:03:11 -0000 1.1.2.3 @@ -15,16 +15,16 @@ AOLserver.

  1. -Add PAM support to AOLserver. OpenACS supports PAM +Add PAM support to AOLserver. OpenACS supports PAM support via the PAM AOLserver module. PAM is system of modular support, and can provide local (unix password), RADIUS, LDAP (more information), and other forms of authentication. Note that due to security issues, the AOLserver PAM module cannot be used for local password authentication.

    1. -Compile and -install ns_pam. Download the tarball to /tmp.

      Debian users: first do apt-get +Compile and +install ns_pam. Download the tarball to /tmp.

      Debian users: first do apt-get install libpam-dev

       [root\@yourserver root]# cd /usr/local/src/aolserver
      @@ -52,15 +52,15 @@
       
    2. -Set up a PAM domain. A PAM domain is a set of rules +Set up a PAM domain. A PAM domain is a set of rules for granting privileges based on other programs. Each instance of AOLserver uses a domain; different aolserver instances can use the same domain but one AOLserver instance cannot use two domains. The domain describes which intermediate programs will be used to check permissions. You may need to install software to perform new types of authentication.

    3. -

      Modify the AOLserver configuration file to support -ns_pam. 

      In /var/lib/aolserver/service0/etc/config.tcl, enable +

      Modify the AOLserver configuration file to support +ns_pam. 

      In /var/lib/aolserver/service0/etc/config.tcl, enable the nspam module by uncommenting this line:

       ns_param   nspam           ${bindir}/nspam.so
       
  2. -Install auth-pam OpenACS service package. Installauth-pam and restart the server.

  3. +Install auth-pam OpenACS service package. Installauth-pam and restart the server.

  4. -Create an OpenACS -authority. OpenACS supports multiple authentication +Create an OpenACS +authority. OpenACS supports multiple authentication authorities. The OpenACS server itself is the "Local Authority," used by default.

    1. Browse to the authentication administration page, http://yourserver/acs-admin/auth/