PAM authentication backend allows users to authenticate against the PAM (Pluggable Authentication
Modules) on the system where st2auth service is running.
Ubuntu:
sudo apt-get -y install libpam0gRHEL/CentOS:
sudo yum -y install pam-devel
Install this into the ST2 virtualenv with:
sudo /opt/stackstorm/st2/bin/pip install git+https://github.com/StackStorm/st2-auth-backend-pam.git@master#egg=st2_auth_backend_pamEdit the file: /lib/systemd/system/st2auth.service. Modify it so that the stauth service runs as root.
| option | required | default | description |
|---|---|---|---|
| service | no | login | PAM service to authenticate against |
Please refer to the authentication section in the StackStorm documentation for basic setup concept. The following is an example of the auth section in the StackStorm configuration file for the PAM backend.
[auth]
mode = standalone
backend = pam
backend_kwargs = {"service": "login"}
...The python implementation of PAM does not allow authentication as the root user.
When utilizing this backend, you will need to authenticate as a non-root user.
Copyright 2015 StackStorm, Inc.
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this work except in compliance with the License. You may obtain a copy of the License in the LICENSE file, or at: http://www.apache.org/licenses/LICENSE-2.0
By contributing you agree that these contributions are your own (or approved by your employer) and you grant a full, complete, irrevocable copyright license to all users and developers of the project, present and future, pursuant to the license of the project.