PAM S/Key is a module derived from Wietse Venema's logdaemon S/Key suite that provides authentication and secure key generation.
PAM S/Key is a module that is based on the original S/Key suite from Wietse Venema's logdaemon. Its design is written to work with all PAM-based Unices, such as FreeBSD, Solaris, and Linux. The project is compatible with any S/Key library that has full interface compatibility with logdaemon. The software has been tested on various operating systems, including Debian Potato, Debian Woody, and Debian Sid, as well as Solaris 2.6, 2.7, and 2.8.
This project is expected to work seamlessly on any PAM implementation that has been properly done. Please note that PAM S/Key provides `auth' services only. It can also implement flexible module stacking using tokens from PAM_AUTHTOK. It is essential to use libskey to utilize this module. Hence, the original logdaemon suite by Wietse Venema is recommended, and it can be found in the logdaemon-5.10 package. This suite comprises the following modules:
1. pam_skey.so - This is the primary module containing routines for checking skey.access for access rules by default.
2. pam_skey_access.so - This add-on module is useful when required to be a requisite module after pam_skey, which means that skey.access controls future loading of other modules. Note that this emulates the behavior of the original Venema's skeylogin.
In the latest release, a _pam_delete() bug has been fixed. The PAM response cleanup was done before skeyverify(), which eventually resulted in broken conversation. It is a significant improvement over the previous versions, and users can expect seamless functionality using this software.
This project is expected to work seamlessly on any PAM implementation that has been properly done. Please note that PAM S/Key provides `auth' services only. It can also implement flexible module stacking using tokens from PAM_AUTHTOK. It is essential to use libskey to utilize this module. Hence, the original logdaemon suite by Wietse Venema is recommended, and it can be found in the logdaemon-5.10 package. This suite comprises the following modules:
1. pam_skey.so - This is the primary module containing routines for checking skey.access for access rules by default.
2. pam_skey_access.so - This add-on module is useful when required to be a requisite module after pam_skey, which means that skey.access controls future loading of other modules. Note that this emulates the behavior of the original Venema's skeylogin.
In the latest release, a _pam_delete() bug has been fixed. The PAM response cleanup was done before skeyverify(), which eventually resulted in broken conversation. It is a significant improvement over the previous versions, and users can expect seamless functionality using this software.
What's New
Version 1.1.5: N/A