Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/vetinari/pam_geoip

pam_geoip - GeoIP account management module for (Linux-)PAM
https://github.com/vetinari/pam_geoip

Last synced: 9 days ago
JSON representation

pam_geoip - GeoIP account management module for (Linux-)PAM

Awesome Lists containing this project

README

        

$Id$

pam_geoip - GeoIP account management module for (Linux-)PAM

This PAM module provides GeoIP checking for logins. The user can be allowed
or denied based on the location of the originating IP address. This is
similar to pam_access(8), but uses a GeoIP City or GeoIP Country database
instead of host name / IP matching.

The matching in pam_geoip is done on given country and city names or on
distance from a given location. With a GeoIP Country database only matches
of the originating country are possible.

This PAM module provides the "account" hook only. To use this module, add a
line like (optional parts in square brackets)

account required pam_geoip.so [system_file=file] [geoip_db=file] \
[charset=name] [action=name] [debug] [geoip6_db=file] [use_v6=1] \
[v6_first=1]

to the relevant files in /etc/pam.d/ and configure your
/etc/security/geoip.conf and/or /etc/security/geoip.SERVICE.conf.

Requirements:

Debian (lenny, squeeze, sid [Linux, kFreeBSD]):
building: libgeoip-dev, libpam0g-dev, perl (pod2man)
running: libgeoip1, libpam0g, libpam-{modules,runtime}, a GeoIP City
database, see http://www.maxmind.com/en/city or a GeoIP Country
database, see http://www.maxmind.com/en/country
IPv6: libgeoip1 >= 1.4.8, a Geo(Lite) City / Country IPv6 database