OpenDoas and PAM

Posted Feb 21, 2024 20:23 UTC (Wed) by timon (subscriber, #152974)
Parent article: Sudo and its alternatives

> Doas supports only a core subset of sudo's feature set, so it cannot really be recommended for anyone who has even slightly more complicated authentication needs than local user accounts. There is no support for integration with LDAP or Kerberos, for instance. However, sudo-rs does call out to Pluggable Authentication Modules (PAM) to authenticate the user, so it can support non-local authentication schemes such as LDAP and Kerberos via the usual Linux mechanism for that.

OpenDoas as available from the Debian archive does integrate with PAM.