From version < 3.2 >
edited by Vincent Massol
on 2020/01/08 12:11
To version < 4.1 >
edited by Vincent Massol
on 2020/01/08 12:12
< >
Change comment: There is no comment for this version

Summary

Details

ExtensionCode.ExtensionClass[0]
Description
... ... @@ -3,3 +3,26 @@
3 3  This is a pure Java implementation that wraps [[pwauth>>https://github.com/phokz/pwauth]], which is a command line tool that provides the authentication and commonly available on UNIX/Linux machines as a package (see custom installation instructions).
4 4  
5 5  This module addresses the need for systems that have a particular PAM configuration and want to use it to authenticate users. This was written by the author because the LDAP module did not consistently function as described in this LDAP over SSL thread. For those that use the LDAP NSS PAM module, which both authenticate users on the OS itself, using this module allows authentication to XWiki to LDAP via this software.
6 +
7 +== Configuration ==
8 +
9 +The extension must be configured in the ##xwiki.cfg## file. For example:
10 +
11 +{{code language="properties"}}
12 +## PAM
13 +#-# PAM authentication service
14 +xwiki.authentication.authclass=com.zensols.xwiki.pamauth.XWikiPAMAuthServiceImpl
15 +
16 +#-# Turn PAM authentication on - otherwise only XWiki authentication
17 +#-# - 0: disable
18 +#-# - 1: enable
19 +#-# The default is 0
20 +xwiki.authentication.pam=1
21 +
22 +#-# Enable local accounts in addition to PAM.
23 +#-# Without this setting you will be unable to log into XWiki with local accounts.
24 +#-# - 0: disable
25 +#-# - 1: enable
26 +#-# The default is 0
27 +xwiki.authentication.pam.trylocal=1
28 +{{/code}}
Prerequisites & Additional Installation Instructions
... ... @@ -14,25 +14,3 @@
14 14  % yum install pwauth
15 15  {{/code}}
16 16  
17 -== Configuration ==
18 -
19 -The extension must be configured in the ##xwiki.cfg## file. For example:
20 -
21 -{{code language="properties"}}
22 -## PAM
23 -#-# PAM authentication service
24 -xwiki.authentication.authclass=com.zensols.xwiki.pamauth.XWikiPAMAuthServiceImpl
25 -
26 -#-# Turn PAM authentication on - otherwise only XWiki authentication
27 -#-# - 0: disable
28 -#-# - 1: enable
29 -#-# The default is 0
30 -xwiki.authentication.pam=1
31 -
32 -#-# Enable local accounts in addition to PAM.
33 -#-# Without this setting you will be unable to log into XWiki with local accounts.
34 -#-# - 0: disable
35 -#-# - 1: enable
36 -#-# The default is 0
37 -xwiki.authentication.pam.trylocal=1
38 -{{/code}}
cogPassword Authentication Module (PAM) bridge
TypeJAR
CategoryAPI
Developed by

Paul Landes

Rating
Rate!
0 Votes
LicenseGNU Lesser General Public License 2.1

Installable with the Extension Manager

Description

This is a password authentication module (PAM) bridge from UNIX/Linux systems to XWiki. This module was inspired by, modeled and written after the LDAP extension. The use case and mechanism is very similar.

This is a pure Java implementation that wraps pwauth, which is a command line tool that provides the authentication and commonly available on UNIX/Linux machines as a package (see custom installation instructions).

This module addresses the need for systems that have a particular PAM configuration and want to use it to authenticate users. This was written by the author because the LDAP module did not consistently function as described in this LDAP over SSL thread. For those that use the LDAP NSS PAM module, which both authenticate users on the OS itself, using this module allows authentication to XWiki to LDAP via this software.

Configuration

The extension must be configured in the xwiki.cfg file.  For example:

## PAM
#-# PAM authentication service
xwiki.authentication.authclass=com.zensols.xwiki.pamauth.XWikiPAMAuthServiceImpl

#-# Turn PAM authentication on - otherwise only XWiki authentication
#-# - 0: disable
#-# - 1: enable
#-# The default is 0
xwiki.authentication.pam=1

#-# Enable local accounts in addition to PAM.
#-# Without this setting you will be unable to log into XWiki with local accounts.
#-# - 0: disable
#-# - 1: enable
#-# The default is 0
xwiki.authentication.pam.trylocal=1

Prerequisites & Installation Instructions

We recommend using the Extension Manager to install this extension (Make sure that the text "Installable with the Extension Manager" is displayed at the top right location on this page to know if this extension can be installed with the Extension Manager). Note that installing Extensions when being offline is currently not supported and you'd need to use some complex manual method.

You can also use the manual method which involves dropping the JAR file and all its dependencies into the WEB-INF/lib folder and restarting XWiki.

Operating System Dependencies

The pwauth program is installed using:

Debian/Ubuntu machines

% apt-get install pwauth

Redhat/Fedora/CentOS

% yum install pwauth

Configuration

The extension must be configured in the xwiki.cfg file.  For example:

## PAM
#-# PAM authentication service
xwiki.authentication.authclass=com.zensols.xwiki.pamauth.XWikiPAMAuthServiceImpl

#-# Turn PAM authentication on - otherwise only XWiki authentication
#-# - 0: disable
#-# - 1: enable
#-# The default is 0
xwiki.authentication.pam=1

#-# Enable local accounts in addition to PAM.
#-# Without this setting you will be unable to log into XWiki with local accounts.
#-# - 0: disable
#-# - 1: enable
#-# The default is 0
xwiki.authentication.pam.trylocal=1

Dependencies

Dependencies for this extension (org.xwiki.contrib:pamauth-authenticator 1.0):

  • org.xwiki.platform:xwiki-platform-oldcore 8.4
  • com.zensols.sys:userauth 0.0.1

Get Connected