一个基于PAM的身份认证系统的设计与实现

当今网络安全越来越受到人们的重视，身份认证作为同络安全的重要组成部分，已成为保证应用系统安全的有力手段。当前的一些身份认证产品的缺点是认证方法单一，缺少扩展性，很难满足不同应用系统的需要。本文提出了一个基于Linux PAM(Pluggable Authentication Modules)的身份认证系统，可支持多种认证方法，而且具有良好的扩展性。本文首先介绍了PAM，讨论了基于PAM开发的关键问题，然后给出了系统的设计，最后结合具体实例阐明了系统的工作原理。

Design and Realization of an Authentication System Based on PAM

Today people pay more attention to network security. Authentication has become a strong measure to guarantee application security. There are some authentication products at present,most of which have few authentica- tion measures and poor scalability,so it is hard to meet various requirements. An authentication system based on Lin- ux PAM (Pluggable Authentication Modules) is presented in this paper. It can support more authentication measures and has good scalability. In this article,first,PAM is introduced and key issues of using PAM are presented. Second, the authentication system is designed. Finally,an authentication example is given to illustrate the operation principle of the system.