WebMO - Computational chemistry on the WWW
Recent news

WebMO 17.0 is now available for free download!

WebMO 17.0 Pro and Enterprise have a variety of additional features and is available for purchase.

The WebMO app is now available for iOS and Android.

August 17, 2019

Allowing only subset of systems users... Log Out | Topics | Search
Moderators | Edit Profile

WebMO Support Forum » Administering WebMO » User Manager » Allowing only subset of systems users with PAM auth « Previous Next »

Author Message
m-rich@northwestern.edu
Unregistered guest
Posted on Thursday, October 19, 2017 - 2:24 pm:   

Hello, we are installing WebMO on a cluster with thousands of users and have enabled PAM authentication, but want to only allow users from a certain department access WebMO. Right now it appears to let any user with an account on the system to log in. How can we limit this to only certain users (say, ones in a certain system group)?
JR Schmidt
Moderator
Username: Schmidt

Post Number: 569
Registered: 11-2006
Posted on Thursday, October 19, 2017 - 3:40 pm:   

PAM authenitcation is handled by the "pam_authenticate.pl" script, which uses the Authen:Simple::PAM Perl module. FYI, the documentation is here: http://search.cpan.org/~chansen/Authen-Simple-PAM-0.2/lib/Authen/Simple/PAM.pm

In particular, it looks like one can pass an argument to specify a particular PAM service. One could set up a PAM service just for WebMO, defining any rules you wanted and let PAM take care of it.

Alternatively, one could edit the "pam_authenticate.pl" script to do a GROUP lookup based on the provided username and reject those not in a particular group, etc.

Add Your Message Here
Post:
Username: Posting Information:
This is a public posting area. Enter your username and password if you have an account. Otherwise, enter your full name as your username and leave the password blank. Your e-mail address is optional.
Password:
E-mail:
Options: Post as "Anonymous"
Enable HTML code in message
Automatically activate URLs in message
Action:

Topics | Last Day | Last Week | Tree View | Search | Help/Instructions | Program Credits Administration