nss-pam-ldapd | NSS and PAM modules for lookups using LDAP | Identity Management library

nss-pam-ldapd is a C library typically used in Security, Identity Management applications. nss-pam-ldapd has no bugs, it has a Weak Copyleft License and it has low support. However nss-pam-ldapd has 2 vulnerabilities. You can download it from GitHub.

This is the nss-pam-ldapd library which consists of an NSS module to do name lookups to an LDAP directory server and a PAM module to do authentication to an LDAP server. The NSS part of this library was forked from nss_ldap as provided by Luke Howard of PADL Software Pty Ltd. The PAM module was mostly provided by Howard Chu of the OpenLDAP project. The NSS library allows distributing account, group, host and other configuration information from a central LDAP server. Because LDAP is a hierarchical directory service, information can be organised in a manner which reflects an organisational structure. This contrasts with the flat, single domain policy of NIS. LDAP has many of the advantages of NIS+ (security and scalability) without the complexity. The system will work alongside your existing NIS, NIS+, DNS and flat file name services. The PAM library (module) can be used to perform authentication based on information inside the LDAP directory. Both libraries consist of a thin NSS or PAM part that proxies the requests to a local daemon (nslcd) that handles the LDAP lookups. This simplifies the software architecture and fixes some scalability and locking problems in the original design of nss_ldap. It is also possible to use the thin NSS and PAM modules together with the nssov overlay in the OpenLDAP server (slapd). The three parts (NSS module, PAM module, and nslcd server) can be built separately and are not strongly tied together. This means that for instance you can still use pam_ldap and use the NSS module from nss-pam-ldapd or use an alternative implementation of nslcd (for instance with the nssov slapd overlay or the pynslcd implementation).