WEBVTT 00:01.680 --> 00:05.880 Will them back in this lesson we can learn about models. 00:06.140 --> 00:14.950 So what is model stands for pluggable indication more than it is a security framework or you can call 00:14.950 --> 00:22.920 it as group of models or library of models which are used to perform authentication of related activities. 00:23.360 --> 00:28.630 There are different types of more than sodded and each module is having its own function. 00:28.770 --> 00:32.580 Ok so what activities he performs. 00:32.630 --> 00:39.980 For example when we enter our username and password then it can be used to validate our username and 00:39.980 --> 00:41.160 password. 00:41.250 --> 00:48.500 Or suppose there is an account which has some restrictions some restrictions for particular resource. 00:48.590 --> 00:50.770 Then bam more dues can help. 00:50.850 --> 00:58.220 Validating for that account whether that account is allowed or not to how access to that particular 00:58.220 --> 01:00.250 resource in that in existence. 01:00.260 --> 01:06.390 All these kinds of activities can be performed here with the help of families. 01:07.040 --> 01:15.260 When logging into a Linux system then that validation procedure is also done with the help of more. 01:15.340 --> 01:22.380 So get this Linux system uses more use for validation purposes or authentication purposes. 01:22.400 --> 01:29.440 There are a number of applications there which use this model for performing Atlantic occasional activities. 01:29.540 --> 01:34.070 You can just go directly to DC Bandar the OK. 01:34.090 --> 01:41.690 And inside that directory you can see a list of configuration files all this configuration files regarding 01:41.750 --> 01:46.700 all that allocations which uses them for authentication purpose. 01:46.900 --> 01:47.420 OK. 01:47.900 --> 01:52.300 So here I would like to issue your basic syntax that uses them. 01:52.340 --> 01:52.670 OK. 01:52.670 --> 01:59.100 Or we can use this basic syntax in those configuration files to perform this authentication deliberate 01:59.150 --> 02:00.110 activities. 02:00.310 --> 02:00.690 OK. 02:00.830 --> 02:02.240 So let's see here. 02:02.330 --> 02:06.470 The first thing that we need to set this type of activity. 02:06.670 --> 02:11.140 Then we need to set control flag then model name or part. 02:11.210 --> 02:11.780 OK. 02:11.990 --> 02:14.660 Everything is dependent on this model name. 02:14.710 --> 02:15.010 OK. 02:15.020 --> 02:21.730 Because moralise having our mobile contains its own function and those functions can be controlled with 02:21.720 --> 02:23.920 the help of activity and control flag. 02:24.010 --> 02:24.400 OK. 02:24.410 --> 02:32.300 And the last experimenter's we can set a pedometer OK for the model or we can pass the promoters to 02:32.660 --> 02:38.160 the model but it is not compulsory that every model should have a pedometer. 02:38.170 --> 02:38.520 OK. 02:38.540 --> 02:42.420 There are different models which do not contain any paramita. 02:42.610 --> 02:42.960 OK. 02:43.100 --> 02:45.070 So this is the basic syntax. 02:45.140 --> 02:51.780 So let's see here the type of activities are there or which type of activities are present here. 02:51.860 --> 02:59.600 The first activities are the function of these activities to perform authentication activity like validating 02:59.600 --> 03:04.570 username and password to get the next activities occurring. 03:04.700 --> 03:12.130 The function of this activity is to perform the validation for an account validation of an account like 03:12.160 --> 03:19.160 whether that account is allowed or not during a particular time period or that account is expired or 03:19.340 --> 03:21.390 valid for log in or not. 03:21.410 --> 03:21.950 OK. 03:21.980 --> 03:27.670 Kinds of activities can be performed here with the help of this new world. 03:27.680 --> 03:32.370 Or you can call it an activity the next activities password. 03:32.660 --> 03:40.160 The function of this activity is to update the user credentials like you suppose the user trying to 03:40.160 --> 03:49.900 update is password then this activity is OK for that application to perform this activity. 03:49.940 --> 03:55.130 The activity of changing the password and the last one is session. 03:55.130 --> 04:02.270 The function of these activities establish a particular session for the user to get are different types 04:02.270 --> 04:03.600 of sessions there. 04:03.650 --> 04:08.140 So this can be used in setting up a particular session for the user. 04:08.510 --> 04:13.060 So of connectivity I want to show here control lacks. 04:13.130 --> 04:16.100 So there are different types of control locks out there. 04:16.100 --> 04:20.440 The first one is a method when the signal flag is set. 04:20.450 --> 04:25.290 Then what happens is if the if this condition become false. 04:25.370 --> 04:25.960 OK. 04:25.970 --> 04:30.230 So what they were configuration you set here for authentication. 04:30.450 --> 04:38.180 And if that gate falls then what happens is the below what there were configuration or whatever activities 04:38.180 --> 04:42.060 are present below this activity are not good quality. 04:42.160 --> 04:42.700 OK. 04:42.920 --> 04:48.180 All those activities gatekeeper and it returns false result are filled result. 04:48.320 --> 04:49.550 Good application. 04:50.170 --> 04:54.770 To the application which uses our authentication mechanism. 04:55.020 --> 04:58.940 OK the next flag is required required. 04:58.940 --> 05:03.490 What happens is set in the control flag required. 05:03.700 --> 05:09.640 And if that condition becomes false then the next use the teacher present. 05:09.850 --> 05:19.180 Below this model get cholera but at the last what happens is it goes to fill the reserved Godet application. 05:19.470 --> 05:19.890 OK. 05:19.920 --> 05:24.090 In the site the models are not good. 05:24.370 --> 05:30.920 OK but in required the further more dues are get called or the next flag is sufficient. 05:31.180 --> 05:35.590 And then it is called a sufficient flag. 05:35.590 --> 05:41.110 Then what happens is it gives a pass result to the application. 05:41.110 --> 05:43.890 And furthermore these are called. 05:44.440 --> 05:46.340 And the next one is optional. 05:46.690 --> 05:50.140 This optional activity has nothing to do with pass fail. 05:50.150 --> 05:51.950 Razored get it. 05:51.960 --> 06:00.310 That is exactly the model and gives the result to that location and the next flag is include the use 06:00.310 --> 06:07.190 of the include flag is to include external configuration files in the current configuration file. 06:07.480 --> 06:11.510 And they are but there are different types of multi-sided there. 06:11.760 --> 06:12.080 OK. 06:12.100 --> 06:15.030 And each model is having its own function. 06:15.140 --> 06:20.650 Ok so it is not possible to get information about all the models which are present there. 06:20.650 --> 06:28.660 So here I want to show you one more Bamm underscored in my not so OK repair model contains an extension 06:28.670 --> 06:36.760 not so so to this model what happens is when you enter a wrong username and password then this modalist 06:36.790 --> 06:40.800 get called there and you will get incorrect logging error message. 06:40.870 --> 06:41.360 OK. 06:41.710 --> 06:49.910 And the last one is paramita So it is not mandatory or compulsory that every model should how experimentor. 06:50.140 --> 06:52.410 OK so it depends on that model. 06:52.420 --> 06:59.580 So if you want to know what can be Pasquier model you can just open that configuration file. 06:59.820 --> 07:05.100 OK well more information is present there inside that configuration file. 07:05.350 --> 07:12.160 So you can read that and you can set those models according to that information or you can search online 07:12.250 --> 07:13.190 about it. 07:13.420 --> 07:13.690 OK. 07:13.690 --> 07:18.160 So after learning all these things I would like to show you something practically. 07:18.250 --> 07:22.230 Hold the settings can be done in those configuration files. 07:22.540 --> 07:30.130 So first of all let's get inside with the band of the year you can see. 07:30.340 --> 07:33.960 These are the lips of all the configuration files. 07:34.160 --> 07:34.680 OK. 07:34.960 --> 07:39.730 For all those application which uses them for authentication purposes. 07:39.910 --> 07:40.200 OK. 07:40.200 --> 07:44.600 Here you can see loggin is present past the blue D or Sudol. 07:44.680 --> 07:45.030 OK. 07:45.040 --> 07:48.860 When we try to execute one of these commands. 07:49.230 --> 07:52.450 OK then those come once goes through the palm. 07:52.450 --> 07:58.570 So here let me show you the example of switch users so let's open it. 07:58.680 --> 08:01.470 Why did the switch user. 08:01.480 --> 08:02.050 OK. 08:02.200 --> 08:06.190 Here you can see the whole just talk about all these things here. 08:06.330 --> 08:12.910 Here in this green color you can see all of these for performing authentication related activity. 08:12.940 --> 08:20.020 And here the flag is set here sufficient and the maudit Parsley's Pam underscore Roop. 08:20.020 --> 08:20.850 OK. 08:20.890 --> 08:22.960 So so what happens. 08:23.020 --> 08:31.090 Dooku this line Boku this line even the root user is trying to log in to any account other than Roop 08:31.420 --> 08:35.700 then he can get into that account without entering possible. 08:35.890 --> 08:38.140 OK here you can see you can't really hear. 08:38.140 --> 08:42.160 This allows the root user who is you without password. 08:42.240 --> 08:47.050 OK so in this way you can learn about each Mordieu and its function. 08:47.210 --> 08:47.610 OK. 08:47.770 --> 08:50.530 So let's understand here. 08:51.570 --> 08:52.020 OK. 08:52.030 --> 08:53.760 Now the root user. 08:53.890 --> 08:54.160 OK. 08:54.160 --> 08:57.200 So let's try to Suchi that to on. 08:58.240 --> 09:03.830 OK you can see here the entering password i have locked in here has Prashad. 09:04.120 --> 09:04.540 OK. 09:04.810 --> 09:09.170 So let's exit and then open the file. 09:09.900 --> 09:15.660 As you will get a list coming out this line. 09:17.020 --> 09:18.180 OK. 09:18.480 --> 09:23.900 And after commending the line let's see what type of recusal result. 09:24.230 --> 09:31.450 And now here you can see when I'm trying to log into Prashanth from root user Nobody is asking me for 09:31.450 --> 09:38.110 the password because we have commented that line which was loving me OK. 09:38.140 --> 09:41.330 Without entering the password. 09:42.330 --> 09:45.530 So in this settings can be done in the configuration file. 09:45.880 --> 09:48.080 OK let's do another setting. 09:50.800 --> 09:55.330 OK here we have just come and get this line. 09:55.800 --> 09:56.680 OK. 09:57.190 --> 10:00.390 Now push on impressionist trying to be sure to use that. 10:00.430 --> 10:02.390 It asks for the password. 10:02.410 --> 10:07.440 What if I want any user to become Rukun without entering the password. 10:07.670 --> 10:10.300 OK so far that this type of 10:13.170 --> 10:15.300 stuff is here. 10:16.610 --> 10:22.500 And for me not so pamper me. 10:22.540 --> 10:26.250 So he's a model which is used to allow access to an account. 10:26.390 --> 10:31.200 And we our past here sufficient to not sufficient. 10:32.420 --> 10:33.530 OK. 10:33.910 --> 10:39.580 Just look at this data. 10:39.840 --> 10:43.150 Let's see what happens which is question. 10:43.530 --> 10:50.160 Now here you can see I logged in as patient and just try to become from oppression. 10:50.760 --> 10:57.830 And here you can see the gotan the password for the root user become Rukeyser. 10:58.170 --> 10:58.830 OK. 10:59.100 --> 11:03.190 So all this happened is due to that one line of code. 11:03.970 --> 11:06.130 Let's try another thing. 11:06.240 --> 11:08.800 Open the file switch user. 11:09.390 --> 11:10.370 OK. 11:10.640 --> 11:12.200 Comes in this line. 11:12.600 --> 11:18.800 OK now I want to prevent all users from using the SU. 11:18.810 --> 11:19.660 That is that. 11:19.660 --> 11:20.700 Come on. 11:20.730 --> 11:38.230 So what you need to be is like ought we sit and call deny darkness or they just I don't it clear this 11:38.260 --> 11:41.380 sick user pressure. 11:42.000 --> 11:47.000 It's just a complication failure switches authentication failure. 11:47.190 --> 11:52.640 All this happening because of that line of configuration that we have done. 11:52.920 --> 11:53.640 OK. 11:54.150 --> 11:55.440 So in this. 11:55.800 --> 11:59.810 Consecrations can be done in this configuration files. 12:00.150 --> 12:02.290 Ok this is how model. 12:02.370 --> 12:06.490 Actually them is very difficult to understand at the beginning. 12:06.660 --> 12:12.400 But when you practice this or when you study about each model it's working. 12:12.560 --> 12:19.830 So study I would hold the flag words or hold that activity's works good then you will automatically 12:19.890 --> 12:23.220 understand how to use this Modu. 12:23.250 --> 12:24.060 OK. 12:24.180 --> 12:26.700 In configuring the system.