User`s guide

Configure Authentication for the CLI
Chapter 8 Users, Security, and Authentication 155
Custom PAM Module
The Digi Passport unit supports custom PAM modules for remote
authentication. This allows creating a custom authentication schema or
using any other third party PAM module. The module must be compiled for
the Digi Passport unit’s environment.
Digi offers an SDK for the Digi Passport family. To download the SDK,
contact technical support at: [e-mail]
1. Place the custom PAM modules onto: /usr/2 on the Digi Passport unit.
2. Use an SCP client (such as WinSCP) to copy data to the /usr2 directory,
or use an SCP or FTP client on the Digi Passport unit to upload the file
while logged in as root.
3. Make sure the module is flagged to be executable (chmod 755 ...)
Note: To activate the custom PAM module it has to be configured in the custom file
located in /etc/pam.d
4. Create a file called: /etc/pam.d/custom and add these lines:
auth required /usr2/my_pam _auth.so
session required /usr2/my_pam_ auth.so
with the my_pam_auth.so being the custom pam module’s name.