https://github.com/alexander-naumov/pam2control

Easily configurable authentication provider
https://github.com/alexander-naumov/pam2control

linux login pam pam-authentication protection security

Last synced: 6 months ago
JSON representation

Easily configurable authentication provider

• Host: GitHub
• URL: https://github.com/alexander-naumov/pam2control
• Owner: alexander-naumov
• License: gpl-3.0
• Created: 2018-11-22T12:09:49.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2021-04-21T20:00:44.000Z (about 5 years ago)
• Last Synced: 2023-03-24T19:32:01.918Z (over 3 years ago)
• Topics: linux, login, pam, pam-authentication, protection, security
• Language: C
• Homepage:
• Size: 197 KB
• Stars: 3
• Watchers: 2
• Forks: 2
• Open Issues: 8
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# pam2control

[![Build Status](https://travis-ci.org/alexander-naumov/pam2control.svg?branch=master)](https://travis-ci.org/alexander-naumov/pam2control)

[![License](https://img.shields.io/github/license/alexander-naumov/pam2control)](https://github.com/alexander-naumov/pam2control/LICENSE)

pam2control, commonly known as p2c, is the easily configurable PAM-based

authentication provider.

It makes it possible to manages access for some users (or group of users;

LDAP is supported) just by adding one single line to the config file.

It can notify you by sending an email if somebody login on server.

It uses syslog and also its own logfile for every login-/logout-events.

It supports FreeBSD and GNU/Linux systems.

## Features

- [x] Behavior of pam2control is set using config file.

- [x] Possibility to control access for single specific user, groups of users or LDAP groups.

- [x] Email notification for every new login.

- [x] [2FA](https://en.wikipedia.org/wiki/Multi-factor_authentication) for SSH login: autogenerated 8 digit one-time PIN via email.

- [x] Syslog messages (supports verbose debug mode).

- [x] Its own logfile for every login/logout events.

- [x] Works with [OpenPAM](https://www.openpam.org/) and [Linux-PAM](http://www.linux-pam.org/).

- [ ] p2ctl - console client of pam2control for PAM services management.

- [ ] Separated access rules for SSH password and public key authentication.

- [ ] GPG encryption for 2FA PIN and notification emails.

- [ ] Separated access rules for SSH- and SCP-sessions.

## Installing pam2control

```sh

git clone https://github.com/alexander-naumov/pam2control

cd pam2control/src

make

sudo make install

```

The p2c.conf man page has details on how to configure pam2control.

## Credits

Copyright (c) 2018-2021 Alexander Naumov (alexander_naumov@opensuse.org).

Licensed under GNU GPLv3 (see [LICENSE](https://github.com/alexander-naumov/pam2control/blob/master/LICENSE) file).