Skip to content

Commit afac630

Browse files
committed
[_596] docs for storing PAM passwords
1 parent 651f603 commit afac630

1 file changed

Lines changed: 11 additions & 0 deletions

File tree

README.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -171,6 +171,17 @@ iCommands.
171171
Caveat for iRODS 4.3+: when upgrading from 4.2, the "irods_authentication_scheme" setting must be changed from "pam" to "pam_password" in
172172
`~/.irods/irods_environment.json` for all file-based client environments.
173173

174+
To replicate iinit's capability for creating valid PAM login credentials file (.irodsA) for the client login environment, we can set these
175+
two configuration variables:
176+
177+
```
178+
legacy_auth.pam.password_for_auto_renew "my_pam_password"
179+
legacy_auth.pam.store_password_to_environment True
180+
```
181+
182+
Optionally, the `legacy_auth.pam.time_to_live_in_hours` may also be set to determine the time-to-live for the new password.
183+
Leaving it at the default value defers this decision to the server.
184+
174185
Maintaining a connection
175186
------------------------
176187

0 commit comments

Comments
 (0)