How to make my linux database use linux login/password info

cknorr · 06-18-2009, 08:52 AM

We have a relational database that runs on linux. We are facing PCI requirements that will require a lot of work to beef up our user credential handling. (Strong passwords, password history list, etc.)

It seems like it might be a better idea to just hook in to linux for our user credential handling. Lots of nice benefits here!

Can someone give a pointer as to what the best way to go with this would be? I imagine this has been done a lot but it's the kind of topic that's a little hard to 'google', etc.!

Much thanks,

Chris

chrism01 · 06-18-2009, 08:16 PM

Well, one way is to create db logins that are Linux logins, so you leverage all the powers of pam, /etc/shadow and so on and the session goes straight into the DB if they login ok to Linux.
Also means you can use LDAP, Kerberos, smartcards etc etc.

cknorr · 09-02-2009, 01:21 PM

Just to close the loop on this, the Pluggable Authentication Module (PAM) seems the way to go on this. We've been able to modify our database to use PAM to perform user authentication and change passwords.

If anyone ever needs some help on this (code examples and what-not) feel free to contact me.

regards,

Chris