Pluggable authentication modules or PAM are a mechanism to integrate multiple low-level authentication schemes into a high-level API, which allows for programs that rely on authentication to be written independently of the underlying authentication scheme. PAM were first developed by Sun Microsystems, and are currently supported in AIX, HP-UX, Solaris, Linux, FreeBSD and NetBSD.

The pluggable nature of PAM is one reason for using dynamic linking of system binaries. However, there needs to be a recovery mechanism in case a problem appears with the linker or shared libraries; for example both NetBSD and FreeBSD supply a /rescue directory of statically linked versions of important system binaries.

See also

• Single sign-on
• Identity management
• JAAS

External links

• Linux-PAM page
• Sun PAM page
• VAS (Includes Active Directory PAM Module)
• Java-PAM bridge
• PAM and password control