mod_auth_pam is, as the name suggests, a PAM authentication module for Prosody, an XMPP server. The module requires lua-pam to operate.
First, lua-pam must be installed. Compilation and installation instructions for lua-pam are out of scope for this document.
A PAM service must also be configured correctly. The means of doing so are also out of scope for this document, but examples are readily available online.
Finally, simply follow the standard procedure for installing Prosody modules.
You will need to change the value of the authentication option in prosody.cfg.lua to "pam". No further configuration is required, but depending on your set-up, the following options may need to be specified:
| Option | Default | Description |
|---|---|---|
auth_pam_service |
"system-auth" |
The PAM service to use, as usually configured in /etc/pam.d/ |
auth_append_host |
false |
Whether to authenticate the JID (e.g. user@example.com) rather than the localpart (user), by appending the hostname to the input supplied by the client |