What is a authentication service?
An authentication service is a mechanism, analogous to the use of passwords on time-sharing systems, for the secure authentication of the identity of network clients by servers and vice versa, without presuming the operating system integrity of either (e.g., Kerberos).
How do I create an auth module?
Use the following list of procedures as a checklist to complete the task.
- Create a callback requirements file for the new authentication module.
- Implement a Principal class.
- Create a service file for the new authentication module.
- (OPTIONAL) Create a localization properties file for the new authentication module.
What is the function of the authentication service?
The function of the Authentication Service is to request information from an authenticating party, and validate it against the configured identity repository using the specified authentication module. After successful authentication, the user session is activated and can be validated
What does the authentication service framework do for SSO?
The Authentication Service framework has a pluggable architecture for authentication modules that have different user credential requirements. Together with the Session Service, the Authentication Service establishes the fundamental infrastructure for SSO. Generally speaking, the Authentication Service:
How does the authentication service work in Sun?
Every time a request is used to access the Authentication Service, the session token identifier is retrieved and used to get the associated session data structure from the Session Service. Additionally, the Authentication Service interfaces with the Session Service to: Initiate or create user sessions.
How is Pam a pluggable Authentication Module ( PAM )?
A call to PAM libraries leaves the checks to authentication experts. PAM is pluggable in that we can have different applications run different tests and modular in that we can add new methods with new libraries. Let’s look at the high-level steps taken when a locally-defined user logs into a text-based console: