diff --git a/doc/config.html b/doc/config.html index 7dacae15..2faebb40 100755 --- a/doc/config.html +++ b/doc/config.html @@ -2289,6 +2289,40 @@ Options Location = Main Building{a}, New Building{b}, Old Building{c} Please note that it is not possible to change a password in the LDAP database from within ELOG.
++PAM (Pluggable authentication modules) support has been implemented by Jan Christoph Terasa as a separate branch at https://bitbucket.org/ritt/elog/branch/pam. + +
+ To use PAM in elogd, do the following: +
+ +elogd with PAM support, by either setting USE_PAM = 1 in the Makefile, or by specifying it when invoking make
+ elogd.cfg:
+ Authentication = PAMPassword file = elogd.passwdSelf register = 3Password file is used to store the user names and email addresses of PAM authenticated users, since this information can not be (universally) requested via PAM. For security reasons the password file does not store a hash of the user password.
+ Self registration has to be enabled (Self register ≥ 1) to use PAM authentication.
+ elogd needs to be able to access the authentication facilities on the system (e.g. be able to read /etc/shadow). This can be achieved by either running elogd as root, or by specifying the appropriate SUID/GUID values for the binary.
+ WARNING: When running elogd as root, be careful when using the -x option to enable execution of commands via $shell, since the commands will be executed using the access rights of the user running elogd!
++ Please note that it is not possible to change the PAM password within ELOG. Instead, please use the available methods on the system +
+ +