diff options
author | Loïc Collignon <loic.collignon@iot.bzh> | 2017-06-26 15:37:17 +0200 |
---|---|---|
committer | Loïc Collignon <loic.collignon@iot.bzh> | 2017-06-26 15:37:17 +0200 |
commit | 99d28457a1285f1709ae0782bd3687fde77ba819 (patch) | |
tree | b2d60a625f9a3bbc00a4ac7fbac073a26a7cb3b2 | |
parent | 5e770edce6416e7e5c08da16ae446a9097792a9c (diff) |
updated the readme.
Change-Id: I03b77765d05ec87e9c2035ab08624fac7f17dc39
Signed-off-by: Loïc Collignon <loic.collignon@iot.bzh>
-rw-r--r-- | README.md | 25 |
1 files changed, 24 insertions, 1 deletions
@@ -1 +1,24 @@ -# agl-identity
\ No newline at end of file +# agl-identity + +## Binding + +This binding provide the following API: +* `login`: Try to login the specified identity. +* `logout`: Try to logout the specified identity. +* `open_session`: Try to authenticate an identity using PAM. +* `close_session`: Try to close an opened session. +* `set_data`: Store a json for an identity/application pair. +* `get_data`: Get a json for an identity/application pair. + +# PAM's module + +This binding make use of PAM to authenticate a user. +A sample PAM module is provided, but you can write your own to allow different authentication workflows. + +The sample module assume there is a `identity.json` file located at the root of an usb-stick. When the user plug-in the key, an udev's rule notify the binding and make a call to the `pam_auth` verb. The binding will then call the PAM module to authenticate the user. The sample PAM module will mount and read the file and open a session if the identity is valid. + +When the user unplug the usb-stick, udev will notify the binding which will close the session. + +# Udev's rules + +The sample PAM module work with usb-stick. In order to detect plug and unplug action, some udev's rules are required. |