1 2 Authen::PAM 3 4 Version 0.16 5 6 2005-Sep-20 7 8 9 Copyright (c) 1998-2005 Nikolay Pelov. All rights reserved. 10 This program is free software; you can redistribute it and/or 11 modify it under the same terms as Perl itself. 12 13 14DESCRIPTION 15=========== 16 17This module provides a Perl interface to the PAM library. 18 19Home site: <http://nik.pelov.name/Authen-PAM/> 20 21After installing the module you can read a small faq with 22examples by typing 'perldoc Authen::PAM::FAQ'. 23 24 25PREREQUISITES 26============= 27 28Before you can build Authen::PAM you need to have the following 29things installed on your system: 30 31 * Perl, at least version 5.003_23 32 * This module is known to work with the following or newer 33 implementations of the PAM library: 34 - Linux-PAM <http://www.kernel.org/pub/linux/libs/pam/> 35 - Solaris 2.6 36 - FreeBSD 3.1 37 - OpenPAM <http://openpam.sourceforge.net/> 38 - HP-UX 11.0 39 - Darwin 6.0 and Mac OS X 10.2 40 41 42BUILDING AND INSTALLING THE MODULE 43================================== 44 45Assuming you have met all the prerequisites, you can built the module 46using the standard sequence of commands: 47 48 perl Makefile.PL 49 make 50 make test 51 make install 52 53By default the module is build using the compiler and options used to build 54the perl executable itself. If you want to change the C compiler then set 55the CC environment variable, for example like this: 56 57 CC=gcc perl Makefile.PL 58 59However, besides changing the compiler, it is still not possible to change 60any other options (for example CFLAGS). If you want to do this then you 61should edit by hand the generated Makefile. 62 63If you have any problems in building and installing the module then 64you should first check on the home page of the Authen::PAM module for 65the latest development version (if any) which could possibly fix your 66problems. If none is available or the problems remain then you can 67write me a mail which includes the following information: 68 * the version of your unix - `uname -a' 69 * the configuration of the perl - `perl -V' 70 * if you are on linux: 71 - the name and version of the distribution you are using 72 - the version of the pam - `ls /lib/libpam.so*' or `ls /usr/lib/libpam.so*' 73 * the description of the "login" service from your pam configuration - 74 usually found in `/etc/pam.conf' file or in the file `/etc/pam.d/login' 75 * the output of the `perl Makefile.PL', `make' and `make test' 76 * any relevant messages produced by the syslogd daemon - 77 usually found in `/var/log/messages' 78 * if the problem is in a perl script which uses the Authen::PAM module then 79 the source of this script (even if it is a slight modification of some 80 of the source code provided with this module) 81 82 83KNOWN PROBLEMS 84============== 85 86 Missing PAM header files 87 ------------------------ 88 89 I know that this is trivial, but some people actually report this. 90 If you get an error like 91 92 PAM.xs:11: security/pam_appl.h: No such file or directory 93 94 this means that either you don't have the PAM library installed on 95 your system or at least the PAM header files are missing. If your 96 distribution provides the PAM library as packages then you should 97 check that you also have installed the pam-dev or pam-devel package. 98 99 100 FreeBSD 4.x 101 ----------- 102 Several people have reported the following error during 'make test': 103 not ok 10 (28 - Module is unknown) 104 I've tracked down the problem to the dynamic loader of FreeBSD not 105 exporting some symbols in dlopen()'d modules. I've submitted a bug 106 report - http://www.freebsd.org/cgi/query-pr.cgi?pr=25059 107 It seems that this bug has been fixed already and starting 108 from the next release of FreeBSD (probably 4.6) the module should 109 work again. 110 111 112 Solaris 2.8 113 ----------- 114 Some users are reporting the following error during 'make test': 115 Segmentation Fault - core dumped 116 make: *** [test_dynamic] Error 139 117 The problem seems to be related with the use of Kerberos 118 authentication (pam_krb5 or pam_krb54). At this moment I don't have 119 any explanation for it. 120 121 122 Login Restrictions 123 ------------------ 124 Most of the current configurations of the 'login' service include a 125 module 'pam_securetty' or 'pam_access' which restrict the login of 126 some users (especially root) depending on the tty or the host name 127 they are logging from. The configuration files of these two modules 128 are /etc/securetty and /etc/security/access.conf respectively. 129 So, if you are running 'make test' and get an error 130 '(Authentication failure)' on test 10 then this might be due to 131 login restrictions of PAM. 132 133 134 Deprecated 135 ---------- 136 137 The following problems occured on old versions of libraries and OSes 138 and are not included in the README file anymore. If you experience them, 139 check the README file in older versions of the PAM library (0.14 or less). 140 - Solaris 2.6 buggy PAM library 141 - Perl 5.004_03 142 - RedHat 6.1 (Authentication failure) 143 - RedHat 8.0 (Segmentation fault (core dumped)) 144 145 146 147AUTHOR 148====== 149 150 Nikolay Pelov <NIKIP at cpan dot org> 151 152 Web page: <http://nik.pelov.name/Authen-PAM/> 153 154