ref: f208e59263d823ebdd8f4160825be3de63556a10
parent: 1a02ec3b5c4f3cb41c7a5b377c5fffa0a415e3b7
author: Jacob Moody <moody@posixcafe.org>
date: Sun Sep 5 05:04:11 EDT 2021
add some documentation on configuring PAM
--- a/README
+++ b/README
@@ -26,3 +26,17 @@
OpenBSD uses LibreSSL in place of OpenSSL. Unfortunately LibreSSL does
not have PSK cipher suites. Tweak Make.config as required. Openssl is
only used for tlsclient and rcpu, login_-dp9ik does not require it.
+
+
+Configuring pam authentication:
+ Many systems configure PAM differently so defer to your OS
+ documentation for where to store pam_p9.so and which pam
+ configuration needs to be changed. Pam_p9.so accepts
+ a single argument within the pam configuration, that being
+ the auth server to use. Something akin to the following
+ should work as additions to a pam configuration.
+
+ auth sufficent pam_p9.so flan
+ account sufficent pam_p9.so flan
+
+ With flan being the hostname or ip of the desired auth server.