pam_gromox(4gx)

๐Ÿ“ฆ
version 3.6 ยท 2 versions
, in alpine 3.24

โœจ NAME โ€” pam_gromox(4gx) โœจ

okay so bestie, this is pam_gromox: a PAM plugin to authenticate with Gromox. It's the pam_gromox(4gx) page from the Gromox admin reference, and it's here to make PAM auth talk to Gromox without drama. ๐Ÿ’…

๐Ÿฆ‹ DESCRIPTION ๐Ÿฆ‹

This module feeds authentication requests to Gromox's authmgr(4gx) module, and thus mysql_adaptor(4gx) and/or ldap_adaptor(4gx). It does not rely on the availability of any Gromox service; just MySQL/LDAP is enough. pam_gromox is meant to be used in conjunction with non-Gromox processes that an administrator may wish to integrate with, such as an SMTP daemon. no cap, it's giving โ€œauth glueโ€ energy. โœจ

๐Ÿ”ฎ INCANTATION IN /etc/pam.d/smtp ๐Ÿ”ฎ

Gromox accounts are not mapped from or to any Unix accounts, so the pam_unix.so module that is present in the default /etc/pam.d/smtp module list within Linux distributions is not suitable and can be wholly replaced. In other words, /etc/pam.d/smtp need just contain:

auth required pam_gromox.so service=smtp
account required pam_permit.so

(pam_gromox does not provide a usable account handler, therefore account required pam_gromox.so would do nothing. The PAM framework always starts out with an initial deny policy, so at least one module needs to be called to make the PAM request succeed. For this reason, if there are no other account modules listed, pam_permit.so should be used.) ๐Ÿซถ

๐Ÿ’– PAM MODULE ARGUMENTS ๐Ÿ’–

  • service=s โ€” check for a specific privilege bit on the user account. Possible values for s are: exch, smtp, imap, pop3, chat, video, files, archive. Default: smtp. slay. ๐Ÿ‘‘

๐ŸŽ€ CONFIGURATION DIRECTIVES ๐ŸŽ€

The usual config file location is /etc/gromox/pam.cfg.

  • config_file_path โ€” colon-separated list of directories in which further configuration files. Default: /etc/gromox/pam:/etc/gromox. ๐Ÿ“
  • pam_prompt โ€” if pam_gromox detects the absence of a password but presence of a PAM conversation function, it will attempt to retrieve the password that way, and in doing so, will show this label just ahead of the nonechoing password prompt. Default: Password:. ๐ŸŽ€

๐ŸŒˆ SEE ALSO ๐ŸŒˆ

  • gromox(7) โ€” the main character, go read it. ๐Ÿ’œ

source/version: Gromox ยท page: pam_gromox(4gx) ยท date: not shown in the original footer โ€” so no fake date, periodt. ๐Ÿซถ๐Ÿ’–

๐Ÿ“ฆ where this page comes from