sssd 2.9.4
Topics
SSSD and PAM

Topics

 PAM DBUS request
 
 
 Authentication Tokens
 
 
 Responses to the PAM client
 
 

Detailed Description

SSSD offers authentication and authorization via PAM

The SSSD provides a PAM client modules pam_sss which can be called from the PAM stack of the operation system. pam_sss will collect all the data about the user from the PAM stack and sends them via a socket to the PAM responder of the SSSD. The PAM responder selects the appropriate backend and forwards the data via D-BUS to the backend. The backend preforms the requested operation and sends the result expressed by a PAM return value and optional additional information back to the PAM responder. Finally the PAM responder forwards the response back to the client.