HomePLDAP
 

PLDAP - An LDAP Module for PAM

Overview

Pldap (PAM LDAP Module) is an experimental attempt at writing a new LDAP authentication module for PAM. It is currently beta code, and only implements the basic elements of LDAP authentication. However, it does provide all the elements of a PAM module, and can be used to authenticate and authorise users against an LDAP database. In particular, the following features have been implemented :

  • Simple bind against a directory to authenticate a user
  • User defined templates for matching a userid to a DN
  • Configurable filters for searching groups to authorise a login
  • Change password capability
  • TLS security
  • Support for Linux, NetBSD, FreeBSD and Solaris
  • Links to both the Solaris and OpenLDAP client libraries

Warning

Pldap v0.4 is beta code. While I've done my best to keep it simple and stable, there are always things that creep into code to surprise you. PLEASE use with care, and any feedback - bad/good - will be appreciated.

News

9 July 2015 Version 0.4 released. Some more minor fixes:

  • Explicitly link against libpam - was relying on the calling program to have done this
  • Update to latest autoconf toolchain

23 April 2006 Version 0.2 released. This has a number of minor fixes including:

  • Support for Solaris and FreeBSD
  • Configure fixes to determine client LDAP libraries
  • Compile under Redhat FC5
  • Minor Bug Fixes

Requirements

Pldap is now known to work against the OpenLDAP server, using either the OpenLDAP client libraries, or the client libraries for the Solaris LDAP server. It has been tested on Linux (Debian and Redhat FC5), FreeBSD and Solaris 10.

Feedback and Questions

I got rid of the mailing list. For any questions just drop me a line at berin at wingsofhermes.org. Or drop something on the blog at blog.wingsofhermes.org.