security/pam-saml - The NetBSD Packages Collection

Crude SAML assertion validator for bridging WebSSO and PAM

PAM provides a way to develop programs that are independent of
authentication scheme.  These programs need "authentication modules" to be
attached to them at run-time in order to work.  Which authentication module
is to be attached is dependent upon the local system setup and is at the
discretion of the local system administrator.

This package contains a PAM module that perform a crude
check on a SAML authentication assertion. The assertion signature and date
are verified, and access is granted on behalf ot the user taked for a
onfigurable attribute.

The only protection against replay attacks is the assertion validity dates
checks, this authentication is therefore secure only if the SAML
authentication assertion remains secret. The assertion has the same role
as a web cookie used for authentication.

Build dependencies

devel/glib2-tools devel/libtool-base pkgtools/mktools devel/pkgconf pkgtools/cwrappers

Runtime dependencies

security/cyrus-sasl textproc/libxml2 security/lasso security/cyrus-sasl textproc/libxml2 security/lasso

Binary packages

OSArchitectureVersion
NetBSD 10.0aarch64pam-saml-1.11nb12.tgz
NetBSD 10.0aarch64pam-saml-1.10nb10.tgz
NetBSD 10.0aarch64pam-saml-1.10nb10.tgz
NetBSD 10.0aarch64ebpam-saml-1.10nb10.tgz
NetBSD 10.0aarch64ebpam-saml-1.11nb12.tgz
NetBSD 10.0alphapam-saml-1.11nb12.tgz
NetBSD 10.0earmv6hfpam-saml-1.11nb12.tgz
NetBSD 10.0earmv6hfpam-saml-1.10nb10.tgz
NetBSD 10.0earmv6hfpam-saml-1.10nb10.tgz
NetBSD 10.0earmv7hfpam-saml-1.11nb12.tgz
NetBSD 10.0earmv7hfpam-saml-1.10nb10.tgz
NetBSD 10.0earmv7hfpam-saml-1.10nb10.tgz
NetBSD 10.0i386pam-saml-1.11nb12.tgz
NetBSD 10.0i386pam-saml-1.10nb10.tgz
NetBSD 10.0powerpcpam-saml-1.10nb10.tgz
NetBSD 10.0x86_64pam-saml-1.11nb12.tgz
NetBSD 10.0_BETAx86_64pam-saml-1.10nb10.tgz
NetBSD 8.0i386pam-saml-1.10nb10.tgz
NetBSD 8.0i386pam-saml-1.10nb10.tgz
NetBSD 8.0powerpcpam-saml-1.10nb9.tgz
NetBSD 8.0powerpcpam-saml-1.10nb10.tgz
NetBSD 8.0powerpcpam-saml-1.10nb10.tgz
NetBSD 8.0x86_64pam-saml-1.10nb10.tgz
NetBSD 8.0x86_64pam-saml-1.10nb10.tgz
NetBSD 8.0x86_64pam-saml-1.11nb12.tgz
NetBSD 9.0aarch64pam-saml-1.11nb12.tgz
NetBSD 9.0aarch64pam-saml-1.10nb10.tgz
NetBSD 9.0aarch64pam-saml-1.10nb10.tgz
NetBSD 9.0alphapam-saml-1.10nb9.tgz
NetBSD 9.0alphapam-saml-1.11nb12.tgz
NetBSD 9.0earmv6hfpam-saml-1.11nb12.tgz
NetBSD 9.0earmv6hfpam-saml-1.10nb10.tgz
NetBSD 9.0earmv6hfpam-saml-1.10nb10.tgz
NetBSD 9.0earmv7hfpam-saml-1.11nb12.tgz
NetBSD 9.0earmv7hfpam-saml-1.10nb10.tgz
NetBSD 9.0earmv7hfpam-saml-1.10nb10.tgz
NetBSD 9.0i386pam-saml-1.10nb10.tgz
NetBSD 9.0i386pam-saml-1.11nb12.tgz
NetBSD 9.0mips64ebpam-saml-1.10nb9.tgz
NetBSD 9.0powerpcpam-saml-1.11nb12.tgz
NetBSD 9.0powerpcpam-saml-1.10nb10.tgz
NetBSD 9.0powerpcpam-saml-1.10nb10.tgz
NetBSD 9.0sparc64pam-saml-1.10nb9.tgz
NetBSD 9.0sparcpam-saml-1.10nb9.tgz
NetBSD 9.0x86_64pam-saml-1.11nb12.tgz
NetBSD 9.0x86_64pam-saml-1.10nb10.tgz
NetBSD 9.3x86_64pam-saml-1.10nb10.tgz
NetBSD 9.3x86_64pam-saml-1.11nb12.tgz

Binary packages can be installed with the high-level tool pkgin (which can be installed with pkg_add) or pkg_add(1) (installed by default). The NetBSD packages collection is also designed to permit easy installation from source.

Available build options

(none)

Known vulnerabilities

The pkg_admin audit command locates any installed package which has been mentioned in security advisories as having vulnerabilities.

Please note the vulnerabilities database might not be fully accurate, and not every bug is exploitable with every configuration.


Problem reports, updates or suggestions for this package should be reported with send-pr.