一个基于PAM的身份认证系统的设计与实现  

Design and Realization of an Authentication System Based on PAM

作　　者：李大治[1] 卿斯汉[1] 

机构地区：[1]中国科学院软件研究所信息安全技术工程研究中心,北京100080

出　　处：《计算机科学》2005年第2期63-65,79,共4页Computer Science

摘　　要：当今网络安全越来越受到人们的重视,身份认证作为网络安全的重要组成部分,已成为保证应用系统安全的有力手段。当前的一些身份认证产品的缺点是认证方法单一,缺少扩展性,很难满足不同应用系统的需要。本文提出了一个基于Linux PAM(Pluggable Authentication Modules)的身份认证系统,可支持多种认证方法,而且具有良好的扩展性。本文首先介绍了PAM,讨论了基于PAM开发的关键问题,然后给出了系统的设计,最后结合具体实例阐明了系统的工作原理。Today people pay more attention to network security. Authentication has become a strong measure to guarantee application security. There are some authentication products at present,most of which have few authentica- tion measures and poor scalability,so it is hard to meet various requirements. An authentication system based on Lin- ux PAM (Pluggable Authentication Modules) is presented in this paper. It can support more authentication measures and has good scalability. In this article,first,PAM is introduced and key issues of using PAM are presented. Second, the authentication system is designed. Finally,an authentication example is given to illustrate the operation principle of the system.

关 键 词：身份认证系统 扩展性 网络安全 应用系统安全 设计 认证方法 PAM 产品 关键问题 手段 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]