Micron Document




Linux PAM
──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
top
Linux Pluggable Authentication Modules (PAM) is a suite of libraries that allow a Linux system administrator to configure methods to authenticate users. It provides a flexible and centralized way to switch authentication methods for secured applications by using configuration files instead of changing application code.cite-ref-2[2] There are Linux PAM libraries allowing authentication using methods such as local passwords, LDAP, or fingerprint readers.cite-ref-3[3] Linux PAM is evolved from the Unix Pluggable Authentication Modules architecture.cite-ref-4[4]

Linux-PAM separates the tasks of authentication into four independent management groups:cite-ref-5[5]

• account modules check that the specified account is a valid authentication target under current conditions. This may include conditions like account expiration, time of day, and that the user has access to the requested service.
• authentication modules verify the user's identity, for example by requesting and checking a password or other secret. They may also pass authentication information on to other systems like a keyring.
• password modules are responsible for updating passwords, and are generally coupled to modules employed in the authentication step. They may also be used to enforce strong passwords.
• session modules define actions that are performed at the beginning and end of sessions. A session starts after the user has successfully authenticated.

Contents


──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

See also
References

cite-note-wikidata-76ac641b05e7396b1bd5de3bf7a5c32a08f2693e-v20-11. "Release 1.7.1". 17 June 2025. Retrieved 23 June 2025.
cite-note-22. "Chapter 1. Introduction". An Internet Archive page of Linux PAM site. Archived from the original on 2021-05-06. Retrieved 2023-11-11.
cite-note-33. citereflauber2020Lauber, Susan (2020-07-22). "An introduction to Pluggable Authentication Modules (PAM) in Linux". Red Hat. Retrieved 2021-02-28.
cite-note-44. citereffernandesreddyFernandes, Savio; Reddy, KLM. "Securing Applications on Linux with PAM | Linux Journal". Linux Journal. Retrieved 2018-09-30.
cite-note-55. "pam.d(8): Pluggable Authentication Modules for - Linux man page". linux.die.net. Retrieved 2021-02-28.

External links

• Primary distribution site for the Linux-PAM project
• Development site for the Linux-PAM project
Understanding PAM, by A.P. Lawrence