Implement PAM for MEPs #1724
Merged
Implement PAM for MEPs #1724
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
khk-globus
requested review from
ryanchard,
chris-janidlo,
rjmello,
joshbryan-globus and
LeiGlobus
khk-globus
added a commit
that referenced
this pull request
Nov 15, 2024
PAM (Pluggable Authentication Modules) is an opt-in configuration item for `ManagerEndpointConfig`. As documented in this PR, it is enabled via the `pam` configuration item, and defaults to false/not enabled if not specified: ```yaml multi_user: true pam: enable: true ``` I was unable to find a suitable Python PAM implementation for our needs, so ended up creating a PAM wrapper. In particular, all of the PAM implementations I found seemed to only implement the `pam_authenticate()` method, but we need the `pam_acct_mgmt()` and `pam_*_session()` functions. Until I'm educated otherwise then, our internal library appears to be more fully featured than other Python PAM implementations -- we may pull it out and offer it as an independent project at some point. [sc-36027]
khk-globus
force-pushed
the
sc-36027/implement_pam_for_meps
branch
from
4c1ec59 to
b4321f5
Compare
khk-globus
added a commit
that referenced
this pull request
Nov 15, 2024
PAM (Pluggable Authentication Modules) is an opt-in configuration item for `ManagerEndpointConfig`. As documented in this PR, it is enabled via the `pam` configuration item, and defaults to false/not enabled if not specified: ```yaml multi_user: true pam: enable: true ``` I was unable to find a suitable Python PAM implementation for our needs, so ended up creating a PAM wrapper. In particular, all of the PAM implementations I found seemed to only implement the `pam_authenticate()` method, but we need the `pam_acct_mgmt()` and `pam_*_session()` functions. Until I'm educated otherwise then, our internal library appears to be more fully featured than other Python PAM implementations -- we may pull it out and offer it as an independent project at some point. [sc-36027]
khk-globus
force-pushed
the
sc-36027/implement_pam_for_meps
branch
from
b4321f5 to
be1d0cd
Compare
khk-globus
added a commit
that referenced
this pull request
Nov 15, 2024
PAM (Pluggable Authentication Modules) is an opt-in configuration item for `ManagerEndpointConfig`. As documented in this PR, it is enabled via the `pam` configuration item, and defaults to false/not enabled if not specified: ```yaml multi_user: true pam: enable: true ``` I was unable to find a suitable Python PAM implementation for our needs, so ended up creating a PAM wrapper. In particular, all of the PAM implementations I found seemed to only implement the `pam_authenticate()` method, but we need the `pam_acct_mgmt()` and `pam_*_session()` functions. Until I'm educated otherwise then, our internal library appears to be more fully featured than other Python PAM implementations -- we may pull it out and offer it as an independent project at some point. [sc-36027]
khk-globus
force-pushed
the
sc-36027/implement_pam_for_meps
branch
from
be1d0cd to
1f44e68
Compare
khk-globus
added a commit
that referenced
this pull request
Nov 19, 2024
PAM (Pluggable Authentication Modules) is an opt-in configuration item for `ManagerEndpointConfig`. As documented in this PR, it is enabled via the `pam` configuration item, and defaults to false/not enabled if not specified: ```yaml multi_user: true pam: enable: true ``` I was unable to find a suitable Python PAM implementation for our needs, so ended up creating a PAM wrapper. In particular, all of the PAM implementations I found seemed to only implement the `pam_authenticate()` method, but we need the `pam_acct_mgmt()` and `pam_*_session()` functions. Until I'm educated otherwise then, our internal library appears to be more fully featured than other Python PAM implementations -- we may pull it out and offer it as an independent project at some point. [sc-36027]
khk-globus
force-pushed
the
sc-36027/implement_pam_for_meps
branch
from
1f44e68 to
bb9ae20
Compare
khk-globus
added a commit
that referenced
this pull request
Nov 20, 2024
PAM (Pluggable Authentication Modules) is an opt-in configuration item for `ManagerEndpointConfig`. As documented in this PR, it is enabled via the `pam` configuration item, and defaults to false/not enabled if not specified: ```yaml multi_user: true pam: enable: true ``` I was unable to find a suitable Python PAM implementation for our needs, so ended up creating a PAM wrapper. In particular, all of the PAM implementations I found seemed to only implement the `pam_authenticate()` method, but we need the `pam_acct_mgmt()` and `pam_*_session()` functions. Until I'm educated otherwise then, our internal library appears to be more fully featured than other Python PAM implementations -- we may pull it out and offer it as an independent project at some point. [sc-36027]
khk-globus
force-pushed
the
sc-36027/implement_pam_for_meps
branch
2 times, most recently
from
9e9813b to
85573b3
Compare
khk-globus
added a commit
that referenced
this pull request
Nov 21, 2024
PAM (Pluggable Authentication Modules) is an opt-in configuration item for `ManagerEndpointConfig`. As documented in this PR, it is enabled via the `pam` configuration item, and defaults to false/not enabled if not specified: ```yaml multi_user: true pam: enable: true ``` I was unable to find a suitable Python PAM implementation for our needs, so ended up creating a PAM wrapper. In particular, all of the PAM implementations I found seemed to only implement the `pam_authenticate()` method, but we need the `pam_acct_mgmt()` and `pam_*_session()` functions. Until I'm educated otherwise then, our internal library appears to be more fully featured than other Python PAM implementations -- we may pull it out and offer it as an independent project at some point. [sc-36027]
khk-globus
force-pushed
the
sc-36027/implement_pam_for_meps
branch
from
85573b3 to
3f83405
Compare
PAM (Pluggable Authentication Modules) is an opt-in configuration item for `ManagerEndpointConfig`. As documented in this PR, it is enabled via the `pam` configuration item, and defaults to false/not enabled if not specified: ```yaml multi_user: true pam: enable: true ``` I was unable to find a suitable Python PAM implementation for our needs, so ended up creating a PAM wrapper. In particular, all of the PAM implementations I found seemed to only implement the `pam_authenticate()` method, but we need the `pam_acct_mgmt()` and `pam_*_session()` functions. Until I'm educated otherwise then, our internal library appears to be more fully featured than other Python PAM implementations -- we may pull it out and offer it as an independent project at some point. [sc-36027]
khk-globus
force-pushed
the
sc-36027/implement_pam_for_meps
branch
from
3f83405 to
4f001c1
Compare
khk-globus
force-pushed
the
sc-36027/implement_pam_for_meps
branch
from
4f001c1 to
0bc2d5e
Compare
joshbryan-globus
approved these changes
Dec 2, 2024
khk-globus
added a commit
that referenced
this pull request
Dec 2, 2024
PAM (Pluggable Authentication Modules) is an opt-in configuration item for `ManagerEndpointConfig`. As documented in this PR, it is enabled via the `pam` configuration item, and defaults to false/not enabled if not specified: ```yaml multi_user: true pam: enable: true ``` I was unable to find a suitable Python PAM implementation for our needs, so ended up creating a PAM wrapper. In particular, all of the PAM implementations I found seemed to only implement the `pam_authenticate()` method, but we need the `pam_acct_mgmt()` and `pam_*_session()` functions. Until I'm educated otherwise then, our internal library appears to be more fully featured than other Python PAM implementations -- we may pull it out and offer it as an independent project at some point. [sc-36027]
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
PAM (Pluggable Authentication Modules) is an opt-in configuration item for
ManagerEndpointConfig. As documented in this PR, it is enabled via thepamconfiguration item, and defaults to false/not enabled if not specified:I was unable to find a suitable Python PAM implementation for our needs, so ended up creating a PAM wrapper. In particular, all of the PAM implementations I found seemed to only implement the
pam_authenticate()method, but we need thepam_acct_mgmt()andpam_*_session()functions. Until I'm educated otherwise then, our internal library appears to be more fully featured than other Python PAM implementations — we may pull it out and offer it as an independent project at some point.[sc-36027]
Type of change