The Pluggable Authentication Module (PAM) Framework

PAM enables you to “plug in” new authentication technologies without changing system entry services such as login, ftp, and telnet. You can also use PAM to integrate UNIX login with other security mechanisms such as DES or Kerberos. You can also plug in mechanisms for account, session, and password management by using this framework. The PAM framework enables you to choose any combination of system entry services (for example, ftp, login, telnet, or rsh) for user authentication.

PAM Module Types

PAM uses runtime pluggable modules to provide authentication for system entry services. These modules are broken down into the following four different types based on their function.

  • The authentication ...

Get Solaris™ 8 Advanced System Administrator's Guide, Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.