OSX "loginwindow" PAM configuration file?

Question

I will return again to the endless saga about writing a PAM module for OSX. I have a module. It works when using ssh or starts a new terminal or su window. What I really, really, really want is just ssh and loginwindow.

My PAM module is in session mode. It either returns PAM_SUCCESS or PAM_IGNORE. Again, it works with other PAM systems such as ssh and su. I really want to connect to loginwindow. Any idea how to do this with OSX and openPAM?

I saw a couple of potential answers that suggest using the file "pam.d / authenticate". It hasn't worked yet. Setting my session line there seems to cause a system connection to Active Directory to fail.

I also tried to create the file "pam.d / loginwindow" just in case, if there was a condition for it - without joy.

ideas?

Answer 1

I know this is too late. Recently, I have been working with PAM modules. To add the module to the login window, you need to add your .so file to the Mac authorization configuration file located in /etc/pam.d/authorisation. You must place your .so file in the / usr / lib / pam / directory.

PAM, " Mac", , SFAuthorizationPluginView. Apple . https://developer.apple.com/library/mac/samplecode/NameAndPassword/Introduction/Intro.html

Apple . !

, . !!