summaryrefslogtreecommitdiff
path: root/security/pam-saml
diff options
context:
space:
mode:
Diffstat (limited to 'security/pam-saml')
-rw-r--r--security/pam-saml/DESCR15
-rw-r--r--security/pam-saml/Makefile16
-rw-r--r--security/pam-saml/PLIST3
3 files changed, 34 insertions, 0 deletions
diff --git a/security/pam-saml/DESCR b/security/pam-saml/DESCR
new file mode 100644
index 00000000000..7f5af172112
--- /dev/null
+++ b/security/pam-saml/DESCR
@@ -0,0 +1,15 @@
+PAM provides a way to develop programs that are independent of
+authentication scheme. These programs need "authentication modules" to be
+attached to them at run-time in order to work. Which authentication module
+is to be attached is dependent upon the local system setup and is at the
+discretion of the local system administrator.
+
+This package contains a PAM module that perform a crude
+check on a SAML authentication assertion. The assertion signature and date
+are verified, and access is granted on behalf ot the user taked for a
+onfigurable attribute.
+
+The only protection against replay attacks is the assertion validity dates
+checks, this authentication is therefore secure only if the SAML
+authentication assertion remains secret. The assertion has the same role
+as a web cookie used for authentication.
diff --git a/security/pam-saml/Makefile b/security/pam-saml/Makefile
new file mode 100644
index 00000000000..7661eeddb8c
--- /dev/null
+++ b/security/pam-saml/Makefile
@@ -0,0 +1,16 @@
+# $NetBSD: Makefile,v 1.1.1.1 2009/09/13 19:57:51 manu Exp $
+#
+
+PKGNAME= ${DISTNAME:S/crudesaml-/pam-saml-/}
+COMMENT= Crude SAML assertion validator for bridging WebSSO and PAM
+
+PKG_DESTDIR_SUPPORT= user-destdir
+
+do-install:
+ ${INSTALL_DATA_DIR} ${DESTDIR}${PREFIX}/lib/security
+ cd ${WRKSRC} && ${SHLIBTOOL} --mode=install \
+ ${INSTALL_PROGRAM} pam_saml.la ${DESTDIR}${PREFIX}/lib/security
+ ${INSTALL_MAN} ${WRKSRC}/pam_saml.5 \
+ ${DESTDIR}${PREFIX}/${PKGMANDIR}/man5
+
+.include "../../security/crudesaml/Makefile.common"
diff --git a/security/pam-saml/PLIST b/security/pam-saml/PLIST
new file mode 100644
index 00000000000..67abeaed871
--- /dev/null
+++ b/security/pam-saml/PLIST
@@ -0,0 +1,3 @@
+@comment $NetBSD: PLIST,v 1.1.1.1 2009/09/13 19:57:51 manu Exp $
+lib/security/pam_saml.la
+man/man5/pam_saml.5