Use "who" when the pronoun is the subject of a verb:

People who live in glass houses shouldn't throw stones.

-- "Who" is the subject of the verb "live."

Use "whom" when the pronoun is the object of a verb or the object of a preposition:

She asked to whom I was referring.

-- "Whom" is the object of the preposition "to."