5.14 pam

The pam module implements user authentication via PAM. It can be used only with ‘LOGIN’ and ‘PLAIN’ GSASL authentication methods.

The module is loaded as follows:

load-module pam {
    command "pam [service=sname]";
}

where sname is the name of PAM service to use. If not supplied, ‘dicod’ service will be used.

The user database is normally initialized as:

user-db "pam://localhost";

If password-resource statement is given, its value will be used as service name, instead of the one specified in the load-module statement, e.g.:

user-db "pam://localhost" {
    password-resource "local";
}    

The group-resource statement is not used, because there is no mechanism to return textual data from PAM.