PAM
Pluggable Authentication Modules: the framework that lets login programs hand password checks and account rules to configurable modules.
In more detail
Each program has a stack in /etc/pam.d, with lines of type auth, account, password or session and a control such as required or sufficient. Modules such as pam_faillock, pam_pwhistory and pam_sss add lockouts, history and directory logins.
Related terms
- SSSD — System Security Services Daemon: the service that connects Linux to a directory such as LDAP or Active Directory and caches its users and passwords.
Taught in
- One Word Locked Out Every Directory User: PAM, SSSD, LDAP And Kerberos — CompTIA Linux+ (XK0-006) Exam Prep
- Three Audit Findings And A Phone: Password Policy, Lockouts And MFA — CompTIA Linux+ (XK0-006) Exam Prep
- Ninety Minutes, Five Domains: The Full Mock And The Week Before The Exam — CompTIA Linux+ (XK0-006) Exam Prep
- Constraints: Limits, Control Groups And Listeners — Linux Foundation Certified System Administrator (LFCS) Exam Prep
- User Limits: Who Gets Which Number At Login — Linux Foundation Certified System Administrator (LFCS) Exam Prep
- LDAP Users Through SSSD — Linux Foundation Certified System Administrator (LFCS) Exam Prep