[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Google
  Web www.spinics.net

Re: PAM Design Question



On Tue, Apr 21, R Coley wrote:

> I have a couple of design questions..
> 
> Firstly, is there any guarantees (ie. Is it a documented standard)  
> regarding the order that the pam framework calls the pam module  
> functions? Can you safely assume across all platforms that it is in  
> the order specified in the config file?

Depends. For a type like auth, acct, password, session, the modules
will be called in the order you define in the config file.

The order of auth, acct, password, session depends on the implementation
of the calling application.
 
> My second question regards perhaps extending login functionality, to   
> perform account lockout upon failed authentication.

Exists already in Linux-PAM: pam_tally2

Maybe you should start reading the PAM documentation?

  Thorsten

-- 
Thorsten Kukuk, Project Manager/Release Manager SLES
SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg
GF: Markus Rex, HRB 16746 (AG Nuernberg)

_______________________________________________
Pam-list mailing list
Pam-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/pam-list

[Fedora Users]     [Kernel]     [Red Hat Install]     [Linux for the blind]     [Gimp]

Add to Google Powered by Linux