./security/pam-saml, Crude SAML assertion validator for bridging WebSSO and PAM

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2010Q1, Version: 0.5, Package name: pam-saml-0.5, Maintainer: manu

PAM provides a way to develop programs that are independent of
authentication scheme. These programs need "authentication modules" to be
attached to them at run-time in order to work. Which authentication module
is to be attached is dependent upon the local system setup and is at the
discretion of the local system administrator.

This package contains a PAM module that perform a crude
check on a SAML authentication assertion. The assertion signature and date
are verified, and access is granted on behalf ot the user taked for a
onfigurable attribute.

The only protection against replay attacks is the assertion validity dates
checks, this authentication is therefore secure only if the SAML
authentication assertion remains secret. The assertion has the same role
as a web cookie used for authentication.

Master sites:

SHA1: 4389bdc6ad963d89b3a26f3af1d66105a927d880
RMD160: dbd0a7bfd5e9b5970e8d1ea265610638fab1a7e1
Filesize: 316.795 KB

Version history: (Expand)