Configuring PAM
Describes how PAM works with Data Fabric.
Data Fabric uses Pluggable Authentication Modules (PAM) for password verification
in a variety of places. Make sure PAM is installed and configured on the node running the
mapr-apiserver
and other components that will use PAM to verify
passwords.
Several PAM modules (profiles), configurable through configuration files in the
/etc/pam.d/
directory, are typically available. Any component verifying
user passwords tries the following three profiles in order:
- sudo (
/etc/pam.d/sudo
) - sshd (
/etc/pam.d/sshd
) - mapr-admin (if you created the
/etc/pam.d/mapr-admin
profile and the component checks beyond the first two profiles).
auth sufficient pam_unix.so # For local OS Auth
Component-specific PAM Configurations
Some ecosystem components have unique requirements that require setup of a component-specific PAM configuration. See the Ecosystem Guide for the specific ecosystem component.