Linux Manuals

pam_tally2 – The login counter (tallying) module Synopsis pam_tally2.so [file=/path/to/counter] [onerr=[fail|succeed]] [magic_root] [even_deny_root] [deny=n] [lock_time=n] [unlock_time=n] [root_unlock_time=n] [serialize] [audit] [silent] [no_log_info] [debug] pam_tally2 [–file /path/to/counter] [–user username] [–reset[=n]] [–quiet] Description This module maintains a count of attempted accesses, can reset count on success, can deny access if too many attempts fail. pam_tally2 comes in two parts: pam_tally2.so…

pam_tally – The login counter (tallying) module Synopsis pam_tally.so [file=/path/to/counter] [onerr=[fail|succeed]] [magic_root] [even_deny_root_account] [deny=n] [lock_time=n] [unlock_time=n] [per_user] [no_lock_time] [no_reset] [audit] [silent] [no_log_info] pam_tally [–file /path/to/counter] [–user username] [–reset[=n]] [–quiet] Description This module maintains a count of attempted accesses, can reset count on success, can deny access if too many attempts fail. pam_tally has several limitations, which are…

pam_systemd – Register user sessions in the systemd login manager Synopsis pam_systemd.so Description pam_systemd registers user sessions with the systemd login manager systemd-logind.service(8), and hence the systemd control group hierarchy. The module also applies various resource management and runtime parameters to the new session, as configured in the m[blue]JSON User Recordsm[][1] of the user, when…

pam_succeed_if – test account characteristics Synopsis pam_succeed_if.so [flag…] [condition…] Description pam_succeed_if.so is designed to succeed or fail authentication based on characteristics of the account belonging to the user being authenticated or values of other PAM items. One use is to select whether to load other modules based on this test. The module should be given…

pam_sss – PAM module for SSSD Synopsis pam_sss.so [quiet] [forward_pass] [use_first_pass] [use_authtok] [retry=N] [ignore_unknown_user] [ignore_authinfo_unavail] [domains=X] [allow_missing_name] [prompt_always] Description pam_sss.so is the PAM interface to the System Security Services daemon (SSSD). Errors and results are logged through syslog(3) with the LOG_AUTHPRIV facility. Options quiet Suppress log messages for unknown users. forward_pass If forward_pass is set…

pam_ssh_agent_auth – PAM module for granting permissions based on SSH agent requests Description This module provides authentication via ssh-agent. If an ssh-agent listening at SSH_AUTH_SOCK can successfully authenticate that it has the secret key for a public key in the specified file, authentication is granted, otherwise authentication fails. Configuration /etc/pam.d/sudo: auth sufficient      pam_ssh_agent_auth.so file=/etc/security/authorized_keys /etc/sudoers: In older…

pam_ssh_add – PAM module to auto load ssh keys into an agent Description pam_ssh_add provides authentication and session modules that allow users to start their session with a running ssh-agent with as many ssh keys loaded as possible. If used, the authentication module simply stores the authentication token for later use by the session module….

pam_ssh – authentication and session management with SSH private keys Synopsis [service-name ] module-type control-flag pam_ssh [options ] Description The SSH authentication service module for PAM, provides functionality for two PAM categories: authentication and session management. In terms of the module-type parameter, they are the “auth ” and “session ” features. It also provides null…

pam_snapper – PAM module which creates filesystem snapshots via "snapper" Synopsis pam_snapper.so [debug] [homeprefix=prefix] [ignoreservices=services] [ignoreusers=users] [rootasroot] [ignoreroot] [openonly] [closeonly] [cleanup=algorithm] Description Create a snapshot at every login of a user, thus he or she always has a save starting point. As many users do not logout for some time, it is a good idea…

pam_shells – PAM module to check for valid login shell Synopsis pam_shells.so Description pam_shells is a PAM module that only allows access to the system if the user’s shell is listed in /etc/shells. It also checks if /etc/shells is a plain file and not world writable. Options This module does not recognise any options. Module…

pam_sge_authorize – PAM module to control access to SGE hosts Synopsis pam_sge_authorize [options] Description This PAM module limits access via etc. to xxQS_NAMExx hosts only to users who currently have a job running on the host. The expectation is that this limits their impact on any other users of the host. Options execd_spool_dir=dir Specify the…

pam_sge-qrsh-setup – PAM module for tight integration with xxQS_NAMExx Synopsis pam_sge-qrsh-setup Description This PAM module provides tight integration of SSH communication into xxQS_NAMExx when is used with qrsh etc. It may also work with other communication methods that run daemons which use PAM. See It provides to the spawned processes the group id from $SGE_ROOT/default/spool/hostname/active_jobs/job_id/addgrpid…

pam_setquota – PAM module to set or modify disk quotas on session start Synopsis pam_setquota.so [fs=/home] [overwrite=0] [debug=0] [startuid=1000] [enduid=0] [bsoftlimit=19000] [bhardlimit=20000] [isoftlimit=3000] [ihardlimit=4000] Description pam_setquota is a PAM module to set or modify a disk quota at session start This makes quotas usable with central user databases, such as MySQL or LDAP. Options fs=/home…

pam_set_items – A PAM test module to set module-specific PAM items Synopsis pam_set_items.so Description PAM modules store data in PAM items. These items are only accessible from module context, not application context as they might include private data (PAM_AUTHTOK normally contains the password). But when testing PAM modules, it’s often nice to make sure a…

pam_sepermit – PAM module to allow/deny login depending on SELinux enforcement state Synopsis pam_sepermit.so [debug] [conf=/path/to/config/file] Description The pam_sepermit module allows or denies login depending on SELinux enforcement state. When the user which is logging in matches an entry in the config file he is allowed access only when the SELinux is in enforcing mode….

pam_selinux – PAM module to set the default security context Synopsis pam_selinux.so [open] [close] [restore] [nottys] [debug] [verbose] [select_context] [env_params] [use_current_range] Description pam_selinux is a PAM module that sets up the default SELinux security context for the next executed process. When a new session is started, the open_session part of the module computes and sets…

pam_securetty – Limit root login to special devices Synopsis pam_securetty.so [debug] Description pam_securetty is a PAM module that allows root logins only if the user is logging in on a "secure" tty, as defined by the listing in the securetty file. pam_securetty checks at first, if /etc/securetty exists. If not and it was built with…

pam_rootok – Gain only root access Synopsis pam_rootok.so [debug] Description pam_rootok is a PAM module that authenticates the user if their UID is 0. Applications that are created setuid-root generally retain the UID of the user but run with the authority of an enhanced effective-UID. It is the real UID that is checked. Options debug…

pam_rhosts – The rhosts PAM module Synopsis pam_rhosts.so Description This module performs the standard network authentication for services, as used by traditional implementations of rlogin and rsh etc. The authentication mechanism of this module is based on the contents of two files; /etc/hosts.equiv (or and ~/.rhosts. Firstly, hosts listed in the former file are treated…

pam_pwquality – PAM module to perform password quality checking Synopsis pam_pwquality.so […] Description This module can be plugged into the password stack of a given service to provide some plug-in strength-checking for passwords. The code was originally based on pam_cracklib module and the module is backwards compatible with its options. The action of this module…