From version < 2.1 >
edited by Paul Landes
on 2020/01/06 15:54
To version < 3.1 >
edited by Paul Landes
on 2020/01/06 16:03
< >
Change comment: There is no comment for this version

Summary

Details

ExtensionCode.ExtensionClass[0]
Prerequisites & Additional Installation Instructions
... ... @@ -1,11 +1,36 @@
1 +== Operating System Dependencies ==
2 +
1 1  The pwauth program is installed using:
2 2  
3 3  === Debian/Ubuntu machines ===
4 -{{{
6 +{{code language="bash"}}
5 5  % apt-get install pwauth
6 -}}}
8 +{{/code}}
7 7  
8 8  === Redhat/Fedora/CentOS ===
9 -{{{
11 +{{code language="bash"}}
10 10  % yum install pwauth
11 -}}}
13 +{{/code}}
14 +
15 +
16 +== Configuration ==
17 +
18 +The extension must be configured in the ##xwiki.cfg## file. For example:
19 +{{code language="properties"}}
20 +## PAM
21 +#-# PAM authentication service
22 +xwiki.authentication.authclass=com.zensols.xwiki.pamauth.XWikiPAMAuthServiceImpl
23 +
24 +#-# Turn PAM authentication on - otherwise only XWiki authentication
25 +#-# - 0: disable
26 +#-# - 1: enable
27 +#-# The default is 0
28 +xwiki.authentication.pam=1
29 +
30 +#-# Enable local accounts in addition to PAM.
31 +#-# Without this setting you will be unable to log into XWiki with local accounts.
32 +#-# - 0: disable
33 +#-# - 1: enable
34 +#-# The default is 0
35 +xwiki.authentication.pam.trylocal=1
36 +{{/code}}
cogPassword Authentication Module (PAM) bridge
TypeJAR
CategoryAPI
Developed by

Paul Landes

Rating
Rate!
0 Votes
LicenseGNU Lesser General Public License 2.1

Installable with the Extension Manager

Description

This is a password authentication module (PAM) bridge from UNIX/Linux systems to XWiki. This module was inspired by, modeled and written after the LDAP extension. The use case and mechanism is very similar.

This is a pure Java implementation that wraps pwauth, which is a command line tool that provides the authentication and commonly available on UNIX/Linux machines as a package (see custom installation instructions).

This module addresses the need for systems that have a particular PAM configuration and want to use it to authenticate users. This was written by the author because the LDAP module did not consistently function as described in this LDAP over SSL thread. For those that use the LDAP NSS PAM module, which both authenticate users on the OS itself, using this module allows authentication to XWiki to LDAP via this software.

Prerequisites & Installation Instructions

We recommend using the Extension Manager to install this extension (Make sure that the text "Installable with the Extension Manager" is displayed at the top right location on this page to know if this extension can be installed with the Extension Manager). Note that installing Extensions when being offline is currently not supported and you'd need to use some complex manual method.

You can also use the manual method which involves dropping the JAR file and all its dependencies into the WEB-INF/lib folder and restarting XWiki.

Operating System Dependencies


The pwauth program is installed using:

The pwauth program is installed using:

Debian/Ubuntu machines

% apt-get install pwauth
% apt-get install pwauth

Redhat/Fedora/CentOS

% yum install pwauth
% yum install pwauth

Configuration

The extension must be configured in the xwiki.cfg file.  For example:
## PAM
#-# PAM authentication service
xwiki.authentication.authclass=com.zensols.xwiki.pamauth.XWikiPAMAuthServiceImpl

#-# Turn PAM authentication on - otherwise only XWiki authentication
#-# - 0: disable
#-# - 1: enable
#-# The default is 0
xwiki.authentication.pam=1

#-# Enable local accounts in addition to PAM.
#-# Without this setting you will be unable to log into XWiki with local accounts.
#-# - 0: disable
#-# - 1: enable
#-# The default is 0
xwiki.authentication.pam.trylocal=1

Dependencies

Dependencies for this extension (org.xwiki.contrib:pamauth-authenticator 1.0):

  • org.xwiki.platform:xwiki-platform-oldcore 8.4
  • com.zensols.sys:userauth 0.0.1

Get Connected