Configuring PAM
Describes how PAM works with Data Fabric.
Data Fabric uses Pluggable Authentication Modules (PAM) for password verification
in a variety of places. Make sure PAM is installed and configured on the node running the
mapr-apiserver and other components that will use PAM to verify
passwords.
Several PAM modules (profiles), configurable through configuration files in the
/etc/pam.d/ directory, are typically available. Any component verifying
user passwords tries the following three profiles in order:
- sudo (
/etc/pam.d/sudo) - sshd (
/etc/pam.d/sshd) - mapr-admin (if you created the
/etc/pam.d/mapr-adminprofile and the component checks beyond the first two profiles).
auth sufficient pam_unix.so # For local OS Auth
Component-specific PAM Configurations
Some ecosystem components have unique requirements that require setup of a component-specific PAM configuration. See the Ecosystem Guide for the specific ecosystem component.