![Maven Central Adds Sigstore Signature Validation](https://cdn.sanity.io/images/cgdhsj6q/production/7da3bc8a946cfb5df15d7fcf49767faedc72b483-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
@128technology/authenticate-pam-prebuilt
Advanced tools
Asynchronous PAM authentication for Node.JS
Asynchronous PAM authentication for NodeJS. This repository provides prebuilt versions of node-authenticate-pam.
You will most likely need to run it as root in most common environments!
Running as non-root on my system (openSUSE 12.1) made a segfault happen somewhere in libpam
! - but seems ok on on openSUSE Leap 42.2
It tries to superseed the previous and outdated node-pam extension with the following improvements:
/etc/pam.d
pam_strerror()
resultsDefault service_name for pam_start(2)
is 'login'.
var pam = require('authenticate-pam');
pam.authenticate('myusername', 'mysecretpassword', function(err) {
if(err) {
console.log(err);
}
else {
console.log("Authenticated!");
}
});
Proper apps should provide their own service name. Sample services are located in /etc/pam.d
.
As an example lookup a service name file for sshd
.
To do proper network authentication you should also provide remoteHost
key to the options argument. It will be passed to pam as PAM_RHOST
(pam_set_item(2)
)
var pam = require('authenticate-pam');
pam.authenticate('rush', 'mysecretpassword', function(err) {
if(err) {
console.log(err);
}
else {
console.log("Authenticated!");
}
}, {serviceName: 'myapp', remoteHost: 'localhost'});
First you need install the development version of PAM libraries for your distro.
Centos and RHEL:
yum install pam-devel
Debian/Ubuntu:
apt-get install libpam0g-dev
debian6/maverick/natty:
apt-get install libreadline5-dev
oneiric (and any newer, eg. Debian 7 or Ubuntu 12.04):
apt-get install libreadline-gplv2-dev
Then you can install the module:
npm install authenticate-pam
FAQs
Asynchronous PAM authentication for Node.JS
We found that @128technology/authenticate-pam-prebuilt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.