Cyclades AlterPath ACS, Command Reference Manual

Page: 99 / 420

AlterPath ACS Command Reference Guide
83
Authentication
Configuration File Syntax
The reader should note that the Linux-PAM-specific tokens are case-insensitive. The
module paths, however, are case-sensitive since they indicate a file’s name and reflect
the case-dependence of typical Linux file systems. The case-sensitivity of the arguments
to any given module is defined for each module in turn.
In addition to the lines described below, there are two special characters provided for the
convenience of the system administrator:
# Comments are preceded by this character and extend to the next end-of-line.
\ This character extends the configuration lines.
A general configuration line of a file in the /etc/pam.d/ directory has the following form:
filename module-type control-flag module-path arguments
The meaning of each of these tokens is explained below. After the meaning of the above
tokens is explained, the method will be described.
Token Description
File-name The service name associated with the entry. For example, ‘ftpd’,
‘rlogind’, ‘su’, etc. There is a special service-name, reserved for
defining a default authentication mechanism. It has the name ‘OTHER’
and may be specified in either lower or upper case characters. Note,
when there is a module specified for a named service, the ‘OTHER’
entries are ignored.
Module-type One of (currently) the four types of module. The four types are as
follows:
•
Auth - This module type provides two aspects of authenticating the
user. First, it establishes that the user is who they claim to be, by
instructing the application to prompt the user for a password or
other means of identification. Second, the module can grant group
membership, independently of the
/etc/groups , or other privileges
through its credential-granting properties.
Table 3.5: /etc/pam.d/ tokens description