Database postragesq PAM authentication

20.13. PAM authentication

This authentication method operates similarly password, It's just that it uses PAM （ Plug in verification module ） As an authentication mechanism . default PAM The service name is postgresql.PAM It is only used to verify the user name / Password pair and optionally verify the connected remote hostname or IP Address . therefore , In the use of PAM Before certification , The user must already exist in the database . of PAM For more information , Please read Linux-PAM page 2

.

The following supported configuration options are used for PAM：

pamservice

PAM The service name .

pam_use_hostname

To judge whether or not to pass PAM_RHOST Item handle remote IP The address or hostname is provided to PAM modular . By default... Is used IP Address . Set this option to 1 You can use the resolved hostname . Hostname resolution may cause login delays （ Most of PAM Configuration does not use this information , Therefore, only those specially created to take advantage of this information PAM You need to consider this setting when configuring ）.

If PAM Is set to read /etc/shadow, Authentication will fail , because PostgreSQL The server consists of a non root User start . However , When PAM Configured to use LDAP Or other authentication verification methods, this is not a problem .