Personal tools
You are here: Home Members pacneil's Home Linux Authentication Systems How User Information is Stored on Your System
Navigation
Log in


Forgot your password?
New user?
 
Document Actions

How User Information is Stored on Your System

by Neil Schneider last modified 2005-05-04 19:24

How User Information is Stored on Your System

next up previous contents index
Next: PAM Pluggable Authentication Modules Up: Linux Authentication Systems Previous: Contents

How User Information is Stored on Your System

/etc/passwd
 

On almost all linux distributions (and commercial *nixes as well), user information is stored in /etc/passwd, a text file which contains the user's login, their encrypted password, a unique numerical user id (called the uid), a numerical group id (called the gid), an optional comment field (usually containing such items as their real name, phone number, etc.), their home directory, and their preferred shell. A typical entry in /etc/passwd looks something like this:

bozo:$1$SJurthXL$mqa.kXhYQSLFm/CUX0BaE:1000:1000:Bozo the Clown:/home/bozo:/bin/bash
What follows is a discussion of various authentication and authorization methods. This isn't as simple as simply choosing one. Several can interact with each other, for example:

  • SASL can use pam to determine what authorizations are allowed for a given user
  • LDAP can use SASL as the authentication mechanism
  • SASL can use kerberos tokens for authentication and authorization
  • passwords for SASL can be looked up from an LDAP server
  • PAM can use ldap for storing usernames and passord authentication information
And different authentication schemes can be used for different applications on the same machine. You could, for example store username and passwords for ftp in LDAP, authenticate IMAP clients using SASL from username password pairs stored in sasldb, and authenticate ssh clients from the standard ``/etc/passwd'' and `` /etc/shadow'' files and or stored public keys. While this presents some complexity, like many things in Linux it also provides flexibility.


next up previous contents index
Next: PAM Pluggable Authentication Modules Up: Linux Authentication Systems Previous: Contents
2005-05-04

Powered by Plone CMS, the Open Source Content Management System

This site conforms to the following standards: