31 Comments
- Zaggynl, on 10/14/2008, -2/+40Tech news on Digg, ***** yeah!
- Digglet69, on 10/15/2008, -2/+18When i hear the word PAM i think of the office. does this make me less of a man?
- lovemorgul, on 10/14/2008, -0/+10bringing security into open environments.
- exscape, on 10/15/2008, -0/+5A good start, but does anyone have more good material? I've always been confused about PAM.
- SirSid, on 05/27/2009, -0/+4Yes
Shame on your libido - Plotinus, on 10/15/2008, -1/+5First used PAM years ago on Samba authentication. It was a bitch to configure at that time but once configured, it just worked. Crackingly good bit of kit.
- humbled, on 10/15/2008, -0/+4I'm a big fan of pam_usb, which lets you use USB keys as a second-factor authentication mechanism. Of course, you can make it sufficient or required depending on your desires.
- satlan, on 10/15/2008, -1/+4Pam Beasly
- bewmIES, on 10/15/2008, -0/+3Have you ever logged into a Linux machine? If so, then configuring Samba was most definitely _not_ the first time you used PAM...
- billbugger, on 10/15/2008, -1/+3Great article, but I would like to see a tutorial that shows how to use pam to authenticate against Active Directory.
- mistergoomba, on 10/15/2008, -0/+2if it does, then i guess we've both lost some manhood today
- Digglet69, on 10/15/2008, -1/+3=[
- GavinZac, on 10/15/2008, -0/+2Should've mentioned the PAM biometrics system, which should be getting more attention both from users and devs, I feel.
- Shoogle, on 10/15/2008, -0/+2OK I sprayed my Linux box with PAM, now what?
- pdiddle, on 10/16/2008, -0/+1It's the samba winbind pam module that does the authentication. But I used this guide when I set up my laptop in work.
http://gentoo-wiki.com/HOWTO_Active_Directory_with ...
You're going to need your Active Directory administrator to enter their password when you add yourself to the domain. - nailer, on 10/18/2008, -0/+1PAM is great, but for Kerberos, it can only get a ticket granting ticket (ie, an initial login). This is what pam_krb5 does, which is fine for login, or gdm, or whatever you use to do your first log in.
Due to limitations in it's API, PAM can't be used by an app to achieve kerberos compatibility - there's no PAM module to use that initial ticket granting ticket to request a service ticket (ie, when you check your mail, or visit a protected intranet site, or pull something from SVN).
As a result, these apps - Subversion, Firefox, Evo, Thiunderbird, whatever - all still have to implement their own code to handle kerberos authentication. - charlietuna, on 10/15/2008, -0/+1Nothing new.
- epsilonbass, on 10/15/2008, -0/+1"When they hear the word PAM, most people think of a certain blonde Canadian Playmate"
False: PAM is the office receptionist of a mid-sized regional paper supplier. - Plotinus, on 10/15/2008, -0/+1True ^^
- heavyd14, on 10/15/2008, -1/+1I think of Pam Spray. Does this make me a glutton?
- boshaus, on 10/15/2008, -2/+2Buried - no mention of Palin/McCain sucking.
- asdfuiop, on 10/15/2008, -4/+4...PAM cooking spray?
- seandfeeney, on 10/15/2008, -1/+1No, when I hear PAM I think of this fat feminist extremist that I work with....makes my want to stab my eyes with a solder gun.
- DJMattB241, on 10/15/2008, -0/+0I came here to see this comment, I left satisfied.
Just like when I see Pam Beasley. You are definitely not less of a man. Pam is hot.
hot. - Riotblade, on 10/15/2008, -2/+2PAM has breast implants
- satlan, on 10/15/2008, -1/+1hmm, pam!
- DuffyDirect, on 10/15/2008, -2/+1when I think PAM I think of Paper Archive Management where I digitize archive boxes all day...
- AmericanGunner, on 10/15/2008, -4/+3PAM and jim are so happy together
- flashingcurser, on 10/15/2008, -4/+2PAM is an evil bitch.
- ToastPop, on 04/17/2009, -6/+1But Pam is away at art school! Ryan can't do this kind of stuff...


What is Digg?