The Pluggable Authentication Module (PAM) Framework

PAM enables you to “plug in” new authentication technologies without changing system entry services such as login, ftp, and telnet. You can also use PAM to integrate UNIX login with other security mechanisms such as DES or Kerberos. You can also plug in mechanisms for account, session, and password management by using this framework. The PAM framework enables you to choose any combination of system entry services (for example, ftp, login, telnet, or rsh) for user authentication.

PAM Module Types

PAM uses runtime pluggable modules to provide authentication for system entry services. These modules are broken down into the following four different types based on their function.

  • The authentication ...

Get Solaris™ 8 Advanced System Administrator's Guide, Third Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.