search

kamax-matrix / mxisd

Federated Matrix Identity Server
GNU Affero General Public License v3.0
224 stars 114 forks source link

[FEATURE] Add support for Auth via PAM #36

Closed r3pek closed 6 years ago

r3pek commented 7 years ago

Just as a feature request.

maxidorius commented 6 years ago

After looking more into this, I can't find a library which is any good or still actively maintained to integrate to PAM.

I'm thinking calling a command with username/password as args/env might be best at this point, which in turn could integrate with PAM. @r3pek what do you think?

r3pek commented 6 years ago

@maxidor should be doable and looks like a simple solution

maxidorius commented 6 years ago

@r3pek I've create #58 to hold the generic concept. Some idea on what the output of the command should look like would be idea, knowing that we would want the same info as in the REST provider. The real question is: JSON seems highly unlikely, so what could we use?

r3pek commented 6 years ago

I think that's complicating it too much (the command line part). Just make it return 0/1 in case of success/fail and adjust the java part from that. Also, try not to pass the user/password as parameters as that way something monitoring the processes can see them, pass them as env vars to the program.

maxidorius commented 6 years ago

Using #58 to track progress, marking this as duplicate for the sake of clarity.

maxidorius commented 6 years ago

@r3pek See v1.2.0-beta.3