PAM: Difference between revisions
(mention that login without PAM is still possible) |
Prabuanand (talk | contribs) (moved content to a new section and warning is retained in Polkit authentication agents page) |
||
| (4 intermediate revisions by 3 users not shown) | |||
| Line 1: | Line 1: | ||
To use PAM, the {{Pkg|linux-pam}} package itself must be installed as well as something for logging into the system that supports PAM. The <code>login</code> bundled with <code>busybox</code> does not support PAM. Instead, one of the following may be used: | To use PAM, the {{Pkg|linux-pam}} package itself must be installed as well as something for logging into the system that supports PAM. The <code>login</code> bundled with <code>busybox</code> does not support PAM. Instead, one of the following may be used: | ||
* | * [[Display manager|login manager]] like [[greetd]] | ||
* <code>login(1)</code> provided by {{Pkg|shadow-login}} | * <code>login(1)</code> provided by {{Pkg|shadow-login}} | ||
* <code>login(1)</code> provided by {{Pkg|util-linux-login}} | * <code>login(1)</code> provided by {{Pkg|util-linux-login}} | ||
| Line 11: | Line 11: | ||
<code>ulimit</code> permissions can be changed via <code>/etc/security/limits.conf</code>. These will only apply if a PAM-compatible tool is used for logging in (as indicated above). | <code>ulimit</code> permissions can be changed via <code>/etc/security/limits.conf</code>. These will only apply if a PAM-compatible tool is used for logging in (as indicated above). | ||
== See | == Applications using pam == | ||
[[Polkit#Authentication agents|Polkit authentication agents]] tend to have issues running without PAM. | |||
== See also == | |||
* [https://wiki.gentoo.org/wiki/PAM PAM on the Gentoo Wiki] | * [https://wiki.gentoo.org/wiki/PAM PAM on the Gentoo Wiki] | ||
* [https://wiki.archlinux.org/title/PAM PAM on the ArchLinux Wiki] | * [https://wiki.archlinux.org/title/PAM PAM on the ArchLinux Wiki] | ||
[[Category:Authentication]] | [[Category:Authentication]] | ||
Latest revision as of 05:47, 11 November 2025
To use PAM, the linux-pam package itself must be installed as well as something for logging into the system that supports PAM. The login bundled with busybox does not support PAM. Instead, one of the following may be used:
- login manager like greetd
login(1)provided by shadow-loginlogin(1)provided by util-linux-login
Warning: Login without PAM will still be possible. See #11730
ulimit
ulimit permissions can be changed via /etc/security/limits.conf. These will only apply if a PAM-compatible tool is used for logging in (as indicated above).
Applications using pam
Polkit authentication agents tend to have issues running without PAM.