PAM is a slick policy-based authentication mechanism. It abstracts away the method of authentication from applications and makes it possible to change the authentication method for a deployed application/service while running instead of making that decision at compile-time. I've come to love PAM because it makes
single sign-on a possibility and lets me focus on my application logic rather than the details of, say,
LDAP authentication.
Since I've been playing around with
Objective Caml lately and I needed to do some authentication, I wrote an OCaml wrapper for PAM.
Take a look, give it a go, and authenticate away!
Labels: authentication, ocaml, programming