Project

General

Profile

Back to 3rd Party Agents Installation

Installing Linux PAM

This section explains how to install Linux PAM, including Prelude support, from the tarball available from the main website. However, Linux PAM might be included with your distribution as a package and it would be easier to install it this way.

Get the sources

Prelude support is included in the Linux PAM since release 0.79. Download Linux PAM from http://www.kernel.org/pub/linux/libs/pam/

Then, make sure you have libprelude development headers, compile and install Linux PAM using the following:

# ./configure
# make
# make install 

Configuration

No configuration is required

Registering Linux PAM profile

Linux PAM analyzer runs as the right required by the library user. If it is for system authentication, this will be root:

prelude-adduser register pam "idmef:w" localhost --uid 0 --gid 0 

and follow the instructions. If the registration is successful - you are ready to test your installation. Please check the Agents Registration Page for more details about sensors registration.

Running Linux PAM

Before running Linux PAM, please make sure to read the General Configuration Page. It is very important for the server-addr parameters to be set to the Prelude-Manager address.

After, if login is compiled to user PAM and /etc/pam.d/login is configured, simply run:

# login
Username: root
Password: ...

See the Linux PAM manual pages and documentation for more options

Back to 3rd Party Agents Installation