Index: openacs-4/packages/acs-authentication/www/doc/ext-auth-pam-install.adp =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-authentication/www/doc/ext-auth-pam-install.adp,v diff -u -r1.2 -r1.3 --- openacs-4/packages/acs-authentication/www/doc/ext-auth-pam-install.adp 29 Oct 2017 11:33:10 -0000 1.2 +++ openacs-4/packages/acs-authentication/www/doc/ext-auth-pam-install.adp 30 Apr 2018 08:12:47 -0000 1.3 @@ -1,14 +1,14 @@ -{/doc/acs-authentication {Authentication}} {Using Pluggable Authentication Modules (PAM) with +{/doc/acs-authentication {ACS Authentication}} {Using Pluggable Authentication Modules (PAM) with OpenACS} Using Pluggable Authentication Modules (PAM) with OpenACS -
+ leftLink="ext-auth-install" leftLabel="Prev" + title="Installation" + rightLink="ext-auth-ldap-install" rightLabel="Next"> +

Using Pluggable Authentication Modules (PAM) with OpenACS

OpenACS supports PAM authetication via the ns_pam module in @@ -18,16 +18,15 @@ Add PAM support to AOLserver. OpenACS supports PAM support via the PAM AOLserver module. PAM is system of modular support, and can provide local (unix password), RADIUS, -LDAP (more information), and other forms of +LDAP (more information), and other forms of authentication. Note that due to security issues, the AOLserver PAM module cannot be used for local password authentication.

  1. Compile and install ns_pam. Download the tarball to /tmp.

    Debian users: first do apt-get install libpam-dev -

    -[root\@yourserver root]# cd /usr/local/src/aolserver
+
    [root\@yourserver root]# cd /usr/local/src/aolserver
 [root\@yourserver aolserver]# tar xzf /tmp/ns_pam-0.1.tar.gz
 [root\@yourserver aolserver]# cd nspam
 [root\@yourserver nspam]# make
@@ -63,8 +62,7 @@
 
    RADIUS in PAM. 
      
 
    1. 
 
      Untar the pam_radius tarball and compile and install. (more
-information)
      -[root\@yourserver root]# cd /usr/local/src/
+information)
      [root\@yourserver root]# cd /usr/local/src/
 [root\@yourserver src]# tar xf /tmp/pam_radius-1.3.16.tar
 [root\@yourserver src]# cd pam_radius-1.3.16
 [root\@yourserver pam_radius-1.3.16]# make
@@ -93,23 +91,19 @@
 
    2. 
 
      Modify the AOLserver configuration file to use this PAM domain.
 Edit the line
      -ns_param   PamDomain             "service0"
-
      So that the value of the parameter matches the name (just the
-file name, not the fully pathed name) of the domain file in
      -/etc/pam.d/
-
      
+ns_param   PamDomain             "service0"
    So that the value of the parameter matches the name (just the
+file name, not the fully pathed name) of the domain file in
    /etc/pam.d/

  • -LDAP in PAM. more information +LDAP in PAM. more information

  • Modify the AOLserver configuration file to support ns_pam. 

    In /var/lib/aolserver/service0/etc/config.tcl, enable the nspam module by uncommenting this line:

    -ns_param   nspam           ${bindir}/nspam.so
-
    +ns_param nspam ${bindir}/nspam.so

  • @@ -132,9 +126,9 @@ - \ No newline at end of file + homeLink="index" homeLabel="Home" + upLink="ext-auth-install" upLabel="Up"> + \ No newline at end of file