pam_aad

Azure Active Directory PAM Module

This PAM module aims to provide Azure Active Directory authentication for Linux.

Installation

./bootstrap.sh
./configure --with-pam-dir=/lib/x86_64-linux-gnu/security/
make
sudo make install

Configuration

Edit /etc/pam.d/{{service}} and add the following line:

auth required pam_aad.so

Configuration File

Create the file /etc/pam_aad.conf and fill it with:

{ 
  "client": {
    "id": "{{client_id}}"
  },
  "domain": "{{domain}}",
  "group": {
    "id": "{{group_id}}"
  },
  "smtp_server": "{{smtp_server}}",
  "tenant": {
    "name": "{{organization}}.onmicrosoft.com",
    "address": "{{organization_email_address}}"
  }
}

Current Behavior

See also

• https://github.com/google/google-authenticator-libpam
• https://github.com/quarxConnect/pam_oauth2