diff --git a/postlfs/security/linux_pam.xml b/postlfs/security/linux_pam.xml index 7e298c39e0..89cba98b53 100644 --- a/postlfs/security/linux_pam.xml +++ b/postlfs/security/linux_pam.xml @@ -13,165 +13,182 @@ ]> - -$LastChangedBy$ -$Date$ - - -Linux-PAM-&Linux_PAM-version; - -PAM(Linux) + - -Introduction to <application>Linux-<acronym>PAM</acronym></application> - + + $LastChangedBy$ + $Date$ + -The Linux-PAM package -contains Pluggable Authentication Modules. This is useful to enable the local -system administrator to choose how applications authenticate users. + Linux-PAM-&Linux_PAM-version; -Package information - -Download (HTTP): -Download (FTP): -Download MD5 sum: &Linux_PAM-md5sum; -Download size: &Linux_PAM-size; -Estimated disk space required: -&Linux_PAM-buildsize; -Estimated build time: -&Linux_PAM-time; - + + PAM(Linux) + -Additional downloads -Patches - -Required patch: - - + + Introduction to Linux-PAM -Documentation - -Optional documentation: - - - - + The Linux-PAM package contains + Pluggable Authentication Modules. This is useful to enable the + local system administrator to choose how applications authenticate + users. -<application>Linux-<acronym>PAM</acronym></application> -dependencies -Recommended - - + Package Information + + + Download (HTTP): + + + Download (FTP): + + + Download MD5 sum: &Linux_PAM-md5sum; + + + Download size: &Linux_PAM-size; + + + Estimated disk space required: &Linux_PAM-buildsize; + + + Estimated build time: &Linux_PAM-time; + + -Optional -sgmltools-lite -and (for pam_userdb module) - - + Additional Downloads + + Patches + + Required patch: + + - + + Documentation + + Optional documentation: + + + - -Installation of -<application>Linux-<acronym>PAM</acronym></application> + Linux-PAM Dependencies -Install Linux-PAM by -running the following commands: + Recommended + -patch -Np1 -i ../Linux-PAM-&Linux_PAM-version;-linkage-2.patch && + Optional + sgmltools-lite + and (for pam_userdb module) + + + + + Installation of Linux-PAM + + Install Linux-PAM by + running the following commands: + +patch -Np1 -i ../Linux-PAM-&Linux_PAM-version;-linkage-2.patch && autoconf && sed -i 's/(mandir)/(MANDIR)/g' modules/Simple.Rules && ./configure --enable-static-libpam --with-mailspool=/var/mail \ --enable-read-both-confs --sysconfdir=/etc && -make +make -If you downloaded the documentation and wish to install it, unpack the -tarball into the doc directory: + If you downloaded the documentation and wish to install it, unpack the + tarball into the doc directory: -tar -jxf ../Linux-PAM-0.78-docs.tar.bz2 -C doc +tar -jxf ../Linux-PAM-0.78-docs.tar.bz2 -C doc -Now, as the root user: + Now, as the root user: -make install && +make install && mv -v /lib/libpam.a /lib/libpam_misc.a /lib/libpamc.a /usr/lib && rm -v /lib/libpam{,c,_misc}.so && ln -v -sf ../../lib/libpam.so.&Linux_PAM-version; /usr/lib/libpam.so && ln -v -sf ../../lib/libpam_misc.so.&Linux_PAM-version; /usr/lib/libpam_misc.so && -ln -v -sf ../../lib/libpamc.so.&Linux_PAM-version; /usr/lib/libpamc.so +ln -v -sf ../../lib/libpamc.so.&Linux_PAM-version; /usr/lib/libpamc.so -Install the documentation using the following commands: + Install the documentation using the following commands: -install -v -d -m755 /usr/share/doc/Linux-PAM-&Linux_PAM-version; && +install -v -d -m755 /usr/share/doc/Linux-PAM-&Linux_PAM-version; && for DOCTYPE in html ps specs txts do cp -v -R doc/$DOCTYPE /usr/share/doc/Linux-PAM-&Linux_PAM-version; -done +done - + - -Command explanations + + Command Explanations -autoconf: This is necessary because the patch -changes where PAM looks for the -cracklib libraries, requiring regeneration of the -configure script. + autoconf: This is necessary because the + patch changes where PAM looks for the cracklib + libraries, requiring regeneration of the configure script. -sed -i 's/(mandir)/(MANDIR)/g' -modules/Simple.Rules: This command puts the module manpages -with the rest of the manpages in -/usr/share/man. + sed -i 's/(mandir)/(MANDIR)/g' modules/Simple.Rules: + This command puts the module manpages with the rest of the manpages in + /usr/share/man. -: This switch builds -static PAM libraries as well as the dynamic libraries. + --enable-static-libpam: This switch builds + static PAM libraries as well as the dynamic libraries. ---with-mailspool=/var/mail: This switch makes -the mailspool directory FHS compliant. + --with-mailspool=/var/mail: This switch + makes the mailspool directory FHS compliant. -: This switch lets the local -administrator choose which configuration file setup to use. + --enable-read-both-confs: This switch lets + the local administrator choose which configuration file setup to use. -mv -v /lib/libpam.a /lib/libpam_misc.a /lib/libpamc.a -/usr/lib: This command moves the static libraries to -/usr/lib to comply with FHS -guidelines. + mv -v /lib/libpam.a /lib/libpam_misc.a /lib/libpamc.a + /usr/lib: This command moves the static libraries to + /usr/lib to comply with FHS + guidelines. -rm -v /lib/libpam{,c,_misc}.so; ln -v -sf ... -/usr/lib/...: These commands move the -.so symlinks from -/lib to -/usr/lib. + rm -v /lib/libpam{,c,_misc}.so; ln -v -sf ... + /usr/lib/...: These commands move the + .so symlinks from + /lib to + /usr/lib. - + - -Configuring -<application>Linux-<acronym>PAM</acronym></application> + + Configuring Linux-PAM -Config files -/etc/security/*, and -/etc/pam.d/* or /etc/pam.conf - -/etc/security/* - -/etc/pam.d/* - -/etc/pam.conf - + + Config Files -Configuration Information + /etc/security/* and + /etc/pam.d/* or + /etc/pam.conf -Configuration information is placed in -/etc/pam.d/ or -/etc/pam.conf depending on user preference. Below are -example files of each type: + + /etc/security/* + -# Begin /etc/pam.d/other + + /etc/pam.d/* + + + + /etc/pam.conf + + + + + + Configuration Information + + Configuration information is placed in + /etc/pam.d/ or + /etc/pam.conf depending on user preference. + Below are example files of each type: + +# Begin /etc/pam.d/other auth required pam_unix.so nullok account required pam_unix.so @@ -187,72 +204,84 @@ other account required pam_unix.so other session required pam_unix.so other password required pam_unix.so nullok -# End /etc/pam.conf +# End /etc/pam.conf -The PAM man page -(man pam) provides a good starting point for descriptions -of fields and allowable entries. The - -Linux-PAM guide for system administrators -is recommended for further reading. + The PAM man page + (man pam) provides a good starting point for + descriptions of fields and allowable entries. The + Linux-PAM guide for system administrators + is recommended for further reading. -Refer to - -for a list of various modules available. + Refer to + for a list of various modules available. -You should now reinstall the -package. - + + You should now reinstall the + package. + - + - -Contents + - -Installed Programs -Installed Libraries -Installed Directories - -unix_chkpwd and pam_tally -libpam.[so,a], libpamc.[so,a] and libpam_misc.[so,a] -/etc/pam.d, /etc/security, /lib/security and /usr/include/security - - + + Contents - -Short Descriptions - + + Installed Programs + Installed Libraries + Installed Directories - -unix_chkpwd -checks user passwords that are stored -in read protected databases. - -unix_chkpwd - - + + unix_chkpwd and pam_tally + libpam.[so,a], libpamc.[so,a], and libpam_misc.[so,a] + /etc/pam.d, /etc/security, /lib/security, and + /usr/include/security + + - -pam_tally -is used to view or manipulate the faillog -file. - -pam_tally - - + + Short Descriptions + + - -libpam.[so,a] -provides the interfaces between applications and the -PAM modules. - -libpam.[so,a] - - - + + unix_chkpwd + + checks user passwords that are stored + in read protected databases. + + unix_chkpwd + + + - + + pam_tally + + is used to view or manipulate the faillog + file. + + pam_tally + + + + + + libpam.[so,a] + + provides the interfaces between applications and the + PAM modules. + + libpam.[so,a] + + + + + + + -