PAM

PAM (Pluggable Authentication Modules for Linux)

https://linux.die.net/man/8/pam

https://wiki.archlinux.org/index.php/LDAP_authentication

tap and soda use PAM to authenticate users with LDAP.

TODO: write about LDAP + PAM https://wiki.debian.org/LDAP/PAM

tap:/etc/security/access.conf

On tap, the access.conf is used to prevent anyone besides root staff from logging in.

-:ALL EXCEPT root (root):ALL

NSS/NSCD

/etc/nsswitch.conf contains configuration for where to look for names for passwd, group, and shadow. This is cached by nscd so you may have to flush the cache using

nscd --invalidate=group