-
Notifications
You must be signed in to change notification settings - Fork 0
/
README
30 lines (22 loc) · 1.21 KB
/
README
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
$Id$
pam_geoip - GeoIP account management module for (Linux-)PAM
This PAM module provides GeoIP checking for logins. The user can be allowed
or denied based on the location of the originating IP address. This is
similar to pam_access(8), but uses a GeoIP2 City or GeoIP2 Country database
instead of host name / IP matching.
The matching in pam_geoip is done on given country and city names or on
distance from a given location. With a Country database only matches
of the originating country are possible.
This PAM module provides the "account" hook only. To use this module, add a
line like (optional parts in square brackets)
account required pam_geoip.so [system_file=file] [geoip_db=file] \
[action=name] [language=name] [debug]
to the relevant files in /etc/pam.d/ and configure your
/etc/security/geoip.conf and/or /etc/security/geoip.SERVICE.conf.
Requirements:
Debian (lenny, squeeze, sid [Linux, kFreeBSD]):
building: libmaxminddb-dev, libpam0g-dev, perl (pod2man)
running: libmaxminddb, libpam0g, libpam-{modules,runtime}, a GeoIP2 City
database or a GeoIP Country database, see
https://www.maxmind.com/en/geoip2-databases and
https://dev.maxmind.com/geoip/geoip2/geolite2/ for more information.