![]() ![]() INSTALLĪuth required pam_ihosts.so user=root file=/etc/10k-common-passwords.txt Options must be supplied to specify the ip-addresss, mac-address, regions or country-codes of those hosts that are allowed to login. This PAM module is free software under the Gnu Public Licence version 3, and comes with no express or implied warranties or guarentees of anything.īy default pam_ihosts.so denies login. This allows fine-grained control of which hosts a user is allowed to login from, with external logins being controlled by region and ip, and internal networks being controlled by mac-address or ip, the former allowing control even in DHCP environments.Īs of version 1.2 both IP4 and IP6 are supported.įirstly, you should be aware that changing your PAM configuration could result in locking yourself out of your own computer systems if you get something wrong or encounter some kind of weird error. pam_ihosts is not an authentication module, it's an account module.This means that it comes into play only after a user has already authenticated, and provides extra checks as to whether an authenticated user should be alowed to log in. ![]() This is a PAM (Pluggable Authentication Modules) that only allows login from certain hosts, either based on mac-address, ip-address, or their region looked as up in internet registrar stats files. ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |