Local UNIX Security Source

The local UNIX security source actually corresponds to the instance of a local security source in a Exalead CloudView installation on a UNIX system.

This security source implementation relies on PAM subsystem's password authentication module. For more information, see your PAM configuration, in particular the /etc/pam.d configuration.

For a Local UNIX security source on a UNIX system, this section describes:

This page discusses:

See Also
Remote HTTP Security Source
Local Windows Security Source
LDAP Security Source
Federate Several Security Sources

Technical Overview

User Login

Users are identified by their UNIX account name.

User Groups

The groups a user belongs to are computed from information found in the system user database.

Security Tokens

For a given user, the following security tokens are generated. These security tokens are built so that ACLs of documents indexed on a UNIX file system can be matched by Exalead CloudView on a UNIX system.

There are security tokens generated for the user and group. The following are examples of security tokens generated from users and groups.

  • If the user UNIX account name is smith and the user identifier (UID) is 501, the following security token are generated unix:user:501.

  • If the group UNIX name is exalead and its UID is 601, the following security token are generated unix:group:601.

Prerequisites

For this security source to be functional, the user running Exalead CloudView must have read access to the system user database.

Limitation

The UNIX security source is only compatible with NIS-based authentication.

Configuring the Security Source

The following parameters control the local UNIX connection used for implementing this security source.

  • Domain: If empty, the default PAM login is used. Otherwise, the specified PAM service is used. The typical configuration is /etc/pam.d/<service>.

  • login as a token: To push the login as a security token.

          <SecuritySource name="Unix" 
      classId="exa:com.exalead.security.sources.local.unix.UnixLocalSecuritySource"
      connectorServer="java0">
      </SecuritySource>