HomePLDAP
 

PLDAP - An LDAP Module for PAM

Overview

Pldap (PAM LDAP Module) is an experimental attempt at writing a new LDAP authentication module for PAM. It is currently beta code, and only implements the basic elements of LDAP authentication. However, it does provide all the elements of a PAM module, and can be used to authenticate and authorise users against an LDAP database. In particular, the following features have been implemented :

  • Simple bind against a directory to authenticate a user
  • User defined templates for matching a userid to a DN
  • Configurable filters for searching groups to authorise a login
  • Change password capability
  • TLS security
  • Support for Linux, NetBSD, FreeBSD and Solaris
  • Links to both the Solaris and OpenLDAP client libraries

Warning

Pldap v0.2 is beta code. While I've done my best to keep it simple and stable, there are always things that creep into code to surprise you. PLEASE use with care, and any feedback - bad/good - will be appreciated.

News

23 April 2006 Version 0.2 released. This has a number of minor fixes including:

  • Support for Solaris and FreeBSD
  • Configure fixes to determine client LDAP libraries
  • Compile under Redhat FC5
  • Minor Bug Fixes

Requirements

Pldap is now known to work against the OpenLDAP server, using either the OpenLDAP client libraries, or the client libraries for the Solaris LDAP server. It has been tested on Linux (Debian and Redhat FC5), FreeBSD and Solaris 10.

Feedback and Questions

A mailing list (pldap@wingsofhermes.org) has been created for pldap related questions, thoughts, comments and input. To subscribe to the list, please send an empty e-mail to

pldap-subscribe@wingsofhermes.org

To unsubscribe from the list - send an empty e-mail to :

pldap-unsubscribe@wingsofhermes.org