Apache Module mod_authn_pam

Available Languages: en

Description:	User authentication using PAM
Status:	External
Module Identifier:	authn_pam
Source File:	mod_authn_pam.c
Compatibility:	Apache 2.1 or greater

Summary

The module mod_authn_pam provides Authentication against a PAM framework using cleartext passwords.

Directives

AuthnPAMFailDelay

Compilation

mod_authn_pam uses the "configure/make/make install" mechanism common to many Open Source programs. Most of the dirty work is handled by either configure or Apache's apxs utility. If you have built apache modules before, there shouldn't be any surprises for you.

Before you can begin compiling mod_authn_pam, you will need a working installation of Apache 2.1-dev (any earlier version, including Apache 2.0.x will NOT work).

The interesting options you can pass to configure are:

--with-apxs=/path/to/apache/dir/bin/apxs
This option is used to specify the location of the apxs utility that was installed as part of apache. Specify the location of the binary, not the directory it is located in.
--with-pam=/path/to/libpam
--with-pam-includes=/path/to/libpam/includes
--with-pam-libs=/path/to/libpam/lib

Call configure with your site-specific values and then "make" and "make install" as usual. The module will be installed in the module directory of your Apache installation.

Integration into Apache

Again mod_authn_pam behave like your average next-door Apache module. Just add

LoadModule authn_pam_module modules/mod_authn_pam.so

to your httpd.conf as usual and restart Apache.

Basic configuration of mod_authn_pam

Draft...

Example Config

       <Location /secure-area>
         AuthType Basic
         AuthName  "basic authn_pop3 testing area"
         AuthBasicProvider pam
         Require valid-user
       </Location>

AuthnPAMFailDelay Directive

Description:	Time to delay on failed authentication
Syntax:	`AuthnPAMFailDelay time`
Default:	`none`
Context:	.htaccess
Status:	External
Module:	mod_authn_pam

Requires Support from the Operating System PAM Lib.