Node:auth, Next:logging, Previous:daemon, Up:configuration

auth -- Authentication-specific options.

These options control the authorization and authentication module lists. For a description of authentication concepts, refer to See authentication.

--authorization modlist

This option allows to set up a list of modules to be used for authorization. modlist is a colon-separated list of modules. Valid modules are:

system

User credentials are retrieved from the system user database (/etc/password).

sql

User credentials are retrieved from the sql database. The set of --sql- options (see below) is used to configure access to the database.

virtdomain

User credentials are retrieved from a "virtual domain" user database.

--authentication modlist

This option allows to set up a list of modules to be used for authentication. modlist is a colon-separated list of modules. Valid modules are:

generic

The generic authentication type. User password is hashed and compared against the hash value returned in authorization stage.

system

The hashed value of the user password is retrieved from /etc/shadow file on systems that support it.

sql

The hashed value of the user password is retrieved from the sql database using query supplied by --sql-getpass option (see below).

pam

The user is authenticated via pluggable authentication module (pam). The pam service name to be used is configured via --pam-service option (see below)

--pam-service name

When compiled with pam support, this option specifies the name of pam service to be used when authenticating.

The following options exist in this group if the package was configured with --enable-sql option. They take effect only if the sql module is used in authentication and/or authorization. Currently only MySQL is supported.

--sql-getpwnam query

sql query to retrieve a passwd entry based on username

--sql-getpwuid query

--sql-getpass query

sql query to retrieve a password from the database

--sql-host name

Name or IP of MySQL server to connect to.

--sql-user name

sql user name

--sql-passwd string

sql connection password

--sql-db string

Name of the database to connect to.

--sql-port number

Port to use