knox-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From m...@apache.org
Subject svn commit: r1789545 - in /knox/trunk/books: 0.10.0/config_pam_authn.md 0.11.0/config_pam_authn.md 0.12.0/config_pam_authn.md
Date Thu, 30 Mar 2017 18:22:38 GMT
Author: more
Date: Thu Mar 30 18:22:37 2017
New Revision: 1789545

URL: http://svn.apache.org/viewvc?rev=1789545&view=rev
Log:
KNOX-915 - Add PAM config example for Ubuntu (Krishna Pandey via Sandeep More)

Modified:
    knox/trunk/books/0.10.0/config_pam_authn.md
    knox/trunk/books/0.11.0/config_pam_authn.md
    knox/trunk/books/0.12.0/config_pam_authn.md

Modified: knox/trunk/books/0.10.0/config_pam_authn.md
URL: http://svn.apache.org/viewvc/knox/trunk/books/0.10.0/config_pam_authn.md?rev=1789545&r1=1789544&r2=1789545&view=diff
==============================================================================
--- knox/trunk/books/0.10.0/config_pam_authn.md (original)
+++ knox/trunk/books/0.10.0/config_pam_authn.md Thu Mar 30 18:22:37 2017
@@ -79,4 +79,19 @@ The third field indicates what action is
 * sufficient: Given that all preceding modules have succeeded, the success of this module
leads to an immediate and successful return to the application (failure of this module is
ignored).
 * optional: The success or failure of this module is generally not recorded.
 
-The fourth field contains the name of the loadable module, pam_*.so. For the sake of readability,
the full pathname of each module is not given. Before Linux-PAM-0.56 was released, there was
no support for a default authentication-module directory. If you have an earlier version of
Linux-PAM installed, you will have to specify the full path for each of the modules. Your
distribution most likely placed these modules exclusively in one of the following directories:
/lib/security/ or /usr/lib/security/.
\ No newline at end of file
+The fourth field contains the name of the loadable module, pam_*.so. For the sake of readability,
the full pathname of each module is not given. Before Linux-PAM-0.56 was released, there was
no support for a default authentication-module directory. If you have an earlier version of
Linux-PAM installed, you will have to specify the full path for each of the modules. Your
distribution most likely placed these modules exclusively in one of the following directories:
/lib/security/ or /usr/lib/security/.
+
+Also, find below a non-normative example of a PAM config file(/etc/pam.d/login) for Ubuntu:
+
+    #%PAM-1.0
+    
+    auth       required     pam_sepermit.so
+    # pam_selinux.so close should be the first session rule
+    session    required     pam_selinux.so close
+    session    required     pam_loginuid.so
+    # pam_selinux.so open should only be followed by sessions to be executed in the user
context
+    session    required     pam_selinux.so open env_params
+    session    optional     pam_keyinit.so force revoke
+    
+    session    required     pam_env.so user_readenv=1 envfile=/etc/default/locale
+    @include password-auth

Modified: knox/trunk/books/0.11.0/config_pam_authn.md
URL: http://svn.apache.org/viewvc/knox/trunk/books/0.11.0/config_pam_authn.md?rev=1789545&r1=1789544&r2=1789545&view=diff
==============================================================================
--- knox/trunk/books/0.11.0/config_pam_authn.md (original)
+++ knox/trunk/books/0.11.0/config_pam_authn.md Thu Mar 30 18:22:37 2017
@@ -80,4 +80,19 @@ The third field indicates what action is
 * sufficient: Given that all preceding modules have succeeded, the success of this module
leads to an immediate and successful return to the application (failure of this module is
ignored).
 * optional: The success or failure of this module is generally not recorded.
 
-The fourth field contains the name of the loadable module, pam_*.so. For the sake of readability,
the full pathname of each module is not given. Before Linux-PAM-0.56 was released, there was
no support for a default authentication-module directory. If you have an earlier version of
Linux-PAM installed, you will have to specify the full path for each of the modules. Your
distribution most likely placed these modules exclusively in one of the following directories:
/lib/security/ or /usr/lib/security/.
\ No newline at end of file
+The fourth field contains the name of the loadable module, pam_*.so. For the sake of readability,
the full pathname of each module is not given. Before Linux-PAM-0.56 was released, there was
no support for a default authentication-module directory. If you have an earlier version of
Linux-PAM installed, you will have to specify the full path for each of the modules. Your
distribution most likely placed these modules exclusively in one of the following directories:
/lib/security/ or /usr/lib/security/.
+
+Also, find below a non-normative example of a PAM config file(/etc/pam.d/login) for Ubuntu:
+
+    #%PAM-1.0
+    
+    auth       required     pam_sepermit.so
+    # pam_selinux.so close should be the first session rule
+    session    required     pam_selinux.so close
+    session    required     pam_loginuid.so
+    # pam_selinux.so open should only be followed by sessions to be executed in the user
context
+    session    required     pam_selinux.so open env_params
+    session    optional     pam_keyinit.so force revoke
+    
+    session    required     pam_env.so user_readenv=1 envfile=/etc/default/locale
+    @include password-auth

Modified: knox/trunk/books/0.12.0/config_pam_authn.md
URL: http://svn.apache.org/viewvc/knox/trunk/books/0.12.0/config_pam_authn.md?rev=1789545&r1=1789544&r2=1789545&view=diff
==============================================================================
--- knox/trunk/books/0.12.0/config_pam_authn.md (original)
+++ knox/trunk/books/0.12.0/config_pam_authn.md Thu Mar 30 18:22:37 2017
@@ -80,4 +80,19 @@ The third field indicates what action is
 * sufficient: Given that all preceding modules have succeeded, the success of this module
leads to an immediate and successful return to the application (failure of this module is
ignored).
 * optional: The success or failure of this module is generally not recorded.
 
-The fourth field contains the name of the loadable module, pam_*.so. For the sake of readability,
the full pathname of each module is not given. Before Linux-PAM-0.56 was released, there was
no support for a default authentication-module directory. If you have an earlier version of
Linux-PAM installed, you will have to specify the full path for each of the modules. Your
distribution most likely placed these modules exclusively in one of the following directories:
/lib/security/ or /usr/lib/security/.
\ No newline at end of file
+The fourth field contains the name of the loadable module, pam_*.so. For the sake of readability,
the full pathname of each module is not given. Before Linux-PAM-0.56 was released, there was
no support for a default authentication-module directory. If you have an earlier version of
Linux-PAM installed, you will have to specify the full path for each of the modules. Your
distribution most likely placed these modules exclusively in one of the following directories:
/lib/security/ or /usr/lib/security/.
+
+Also, find below a non-normative example of a PAM config file(/etc/pam.d/login) for Ubuntu:
+
+    #%PAM-1.0
+    
+    auth       required     pam_sepermit.so
+    # pam_selinux.so close should be the first session rule
+    session    required     pam_selinux.so close
+    session    required     pam_loginuid.so
+    # pam_selinux.so open should only be followed by sessions to be executed in the user
context
+    session    required     pam_selinux.so open env_params
+    session    optional     pam_keyinit.so force revoke
+    
+    session    required     pam_env.so user_readenv=1 envfile=/etc/default/locale
+    @include password-auth



Mime
View raw message