The following XSSO implementation conformance categories are defined:
This is applicable to an implementation of the PAM infrastructure that supports the PAM application programming interfaces that may be used by a sign-on application.
This is applicable to an implementation of the PAM infrastructure that uses and supports the PAM system programming interfaces for the integration of PAM modules.
This is applicable to implementations of PAM modules to be used underneath the PAM infrastructure. A set of options equivalent to the module types are supported thus, Authentication, Account Management, Session Management, Password Management, Mapping.
| pam_acct_mgmt() | pam_authenticate() |
| pam_authenticate_secondary() | pam_chauthtok() |
| pam_close_session() | pam_end() |
| pam_get_data() | pam_getenv() |
| pam_get_envlist() | pam_get_item() |
| pam_get_mapped_authtok() | pam_get_mapped_username() |
| pam_get_user() | pam_open_session() |
| pam_putenv() | pam_setcred() |
| pam_set_data() | pam_set_item() |
| pam_set_mapped_authtok() | pam_set_mapped_username() |
| pam_start() | pam_strerror() |
| pam_sm_acct_mgmt() | pam_sm_authenticate() |
| pam_sm_authenticate_secondary() | pam_sm_chauthtok() |
| pam_sm_close_session() | pam_sm_get_mapped_authtok() |
| pam_sm_get_mapped_username() | pam_sm_set_mapped_authtok() |
| pam_sm_set_mapped_username() | pam_sm_open_session() |
| pam_sm_setcred() |
| Authentication Option | |
| pam_sm_authenticate() | pam_sm_setcred() |
| Account Management Option | |
| pam_sm_acct_mgmt() | |
| Session Management Option | |
| pam_sm_close_session() | pam_sm_open_session() |
| Password Management Module | |
| pam_sm_chauthtok() | |
| Mapping Option | |
| pam_sm_get_mapped_authtok() | pam_sm_get_mapped_username() |
| pam_sm_set_mapped_authtok() | pam_sm_set_mapped_username() |
An implementor of a module shall define how that module is configured, and in particular, define the options that may be included in a PAM configuration entry for the module.
An implementor of a module that is capable of using mapping shall document whether the module provides support for mapping usernames, or passwords, or both.
| Contents | Next section | Index |