Mailing-List: contact user-help@shiro.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@shiro.apache.org
Received-SPF: neutral (athena.apache.org: local policy)
MIME-Version: 1.0
Sender: les.hazlewood@anjinllc.com
In-Reply-To: <1297971372005-6037285.post@n2.nabble.com>
References: <1297971372005-6037285.post@n2.nabble.com>
Date: Thu, 17 Feb 2011 12:01:10 -0800
Message-ID: <AANLkTikvmPSncF58j-nt5a_=m3eO09R91QTsaBB1T5U9@mail.gmail.com>
Subject: Re: Shiro Realm for Unix PAM
From: Les Hazlewood <lhazlewood@apache.org>
To: user@shiro.apache.org
Content-Type: text/plain; charset=UTF-8

H Philippe,

Thanks for sharing with us - this is cool!

Best,

Les
P.S.  Thanks to the Shiro team for a great project in general - I'm
only part of the overall team :)

On Thu, Feb 17, 2011 at 11:36 AM, Philippe Laflamme <twologic@gmail.com> wrote:
>
> Hi,
>
> I was asked recently if my Java web app could use unix PAM subsystem for
> authenticating users. The sys admins would like that because they control
> the authentication configuration that way. After looking for an answer I
> ended up finding Koshuke's libpam4j which uses JNA to talk to the system's
> libpam. The next logical step was to use this inside my favorite security
> library...
>
> Since Shiro is so nice, it took like 5 minutes to write a Realm
> implementation that leverages libpam4j. The result is that you can use Shiro
> to authenticate users against the OS's mechanism (which in turn can
> authenticate against pretty much anything).
>
> I took the liberty to create an improvement in JIRA here:
> https://issues.apache.org/jira/browse/SHIRO-269
>
> The realm implementation is available here:
> https://github.com/plaflamme/shiro-libpam4j
>
> Thanks to Les and Koshuke for writing their libs so nicely that it made
> writing this so trivial!
>
> Cheers,
> Philippe