Enabling LDAP on Thunderbird in Software

Encode Code 39 Full ASCII in Software Enabling LDAP on Thunderbird

In Thunderbird, open the address book, then select File | New, and choose the LDAPD directory Here you can enter the LDAP server This displays a panel where you can enter the address book name, the hostname of LDAP server, the Base DN to search, and the port number, such as 389

Pluggable Authentication Modules (PAM) is an authentication service that lets a system determine the method of authentication to be performed for users In a Linux system, authentication has traditionally been performed by looking up passwords When a user logs in, the login process looks up their password in the password file With PAM, users requests for authentication are directed to PAM, which in turn uses a specified method to authenticate the user This could be a simple password lookup or a request to an LDAP server, but it is PAM that provides authentication, not a direct password lookup by the user or application In this respect, authentication becomes centralized and controlled by a specific service, PAM The actual authentication procedures can be dynamically configured by the system administrator Authentication is carried out by modules that can vary according to the kind of authentication needed An administrator can add or replace

28:

modules by simply changing the PAM configuration files See the PAM website at kernel org/pub/linux/libs/pam for more information and a listing of PAM modules PAM modules are located in the /lib/security directory

PAM uses different configuration files for different services that request authentication Such configuration files are kept in the /etc/pamd directory For example, you have a configuration file for logging in to your system (/etc/pamd/login), one for the graphical login (/etc/pamd/gdm), and one for accessing your Samba server (/etc/pamd/samba) A default PAM configuration file, called /etc/pamd/other, is invoked if no services file is present The system-auth file contains standard authentication modules for system services

A PAM configuration file contains a list of modules to be used for authentication They have the following format:

The module-path is the module to be run, and module-args are the parameters you want passed to that module Though there are a few generic arguments, most modules have their own The module-type refers to different groups of authentication management: account, authentication, session, and password The account management performs account verification, checking such account aspects as whether the user has access, or whether the password has expired Authentication (auth) verifies who the user is, usually through a password confirmation Password management performs authentication updates such as password changes Session management refers to tasks performed before a service is accessed and before it is shut down These include tasks like initiating a log of a user s activity or mounting and unmounting home directories

/etc/pamconf file Entries in this file have a service field, which refers to the application that the module is used for If the /etc/pamd directory exists, /etc/pamconf is automatically ignored The control-flag field indicates how PAM is to respond if the module fails The control can be a simple directive or a more complicated response that can specify return codes like open_err with actions to take The simple directives are requisite, required, sufficient, and optional The requisite directive ends the authentication process immediately if the module fails to authenticate The required directive only ends the authentication after the remaining modules are run The sufficient directive indicates that success of this module is enough to provide authentication unless a previous required module has failed The optional directive indicates the module s success is not needed unless it is the only authentication module for its service If you specify return codes, you can refine the conditions for authentication failure or success Return codes can be given values such as die or ok The open_err return code could be given the action die, which

Part VII: