pam

Documentation

Index

• type Authenticator
  • func NewAuthenticator(service string, opener SessionOpener) (*Authenticator, error)
  • func (a *Authenticator) Authenticate(ctx context.Context, username, password string) (err error)
• type Session
• type SessionOpener

Types

type Authenticator

type Authenticator struct {
	// contains filtered or unexported fields
}

Authenticator drives PAM authentication using a configurable session opener.

func NewAuthenticator

func NewAuthenticator(service string, opener SessionOpener) (*Authenticator, error)

NewAuthenticator constructs a PAM authenticator using the provided service name. A nil opener selects the default implementation that talks to the host PAM stack.

func (*Authenticator) Authenticate

func (a *Authenticator) Authenticate(ctx context.Context, username, password string) (err error)

Authenticate validates a user/password pair against the configured PAM service.

type Session

type Session interface {
	Authenticate(ctx context.Context, password string) error
	Close() error
}

Session represents an authenticated PAM transaction lifecycle.

type SessionOpener

type SessionOpener interface {
	Open(ctx context.Context, service, username string) (Session, error)
}

SessionOpener creates new PAM sessions for a given service/username.