The Linux Manuals (man pages) document is an important part of Linux documents. Linux Manuals are organized as several sections. Each section has a group of commands for a specific area in Linux usage, administration or development.
pam_pwhistory – PAM module to remember last passwords Synopsis pam_pwhistory.so [debug] [use_authtok] [enforce_for_root] [remember=N] [retry=N] [authtok_type=STRING] Description This module saves the last passwords for each user in order to force password change history and keep the user from alternating between the same password too frequently. This module does not work together with kerberos. In general,…
pam_postgresok – simple check of real UID and corresponding account name Synopsis auth sufficient pam_postgresok.so Description pam_postgresok.so is designed to check that the real UID of the calling process belongs to the "postgres" user and equal to 26 (the value assigned to that user on Red Hat Linux systems). Arguments debug Enable module debugging. The…
pam_pkcs11 – PAM Authentication Module for PKCS#11 token libraries Synopsis pam_pkcs11.so [debug] [configfile=<configfile>] Description This Linux-PAM login module allows a X.509 certificate based user login. The certificate and its dedicated private key are thereby accessed by means of an appropriate PKCS #11 module. For the verification of the users’ certificates, locally stored CA certificates as…
pam_permit – The promiscuous module Synopsis pam_permit.so Description pam_permit is a PAM module that always permit access. It does nothing else. In the case of authentication, the user’s name will be set to nobody if the application didn’t set one. Many applications and PAM modules become confused if this name is unknown. This module is…
pam_passwdqc – Password quality-control PAM module Synopsis [service-name ] module-type control-flag pam_passwdqc [options ] Description The module is a simple password strength checking module for PAM. In addition to checking regular passwords, it offers support for passphrases and can provide randomly generated ones. The module provides functionality for only one PAM management group: password changing….
pam_oddjob_mkhomedir.so – PAM module to create users home directory via oddjob Synopsis session optional /lib/security/pam_oddjob_mkhomedir.so Description The pam_oddjob_mkhomedir.so module checks if the user’s home directory exists, and if it does not, it invokes the mkhomedirfor method of the com.redhat.oddjob_mkhomedir service for the PAM_USER if the module is running with superuser privileges. Otherwise, it invokes the…
pam_nologin – Prevent non-root users from login Synopsis pam_nologin.so [file=/path/nologin] [successok] Description pam_nologin is a PAM module that prevents users from logging into the system when /var/run/nologin or /etc/nologin exists. The contents of the file are displayed to the user. The pam_nologin module has no effect on the root user’s ability to log in. Options…
pam_namespace_helper – Helper binary that creates home directories Synopsis pam_namespace_helper Description pam_namespace_helper is a helper program for the pam_namespace module that sets up a private namespace for a session with polyinstantiated directories. The helper ensures that the namespace mount points exist before they are started to be used for the polyinstantiated directories. Mount points for…
pam_namespace – PAM module for configuring namespace for a session Synopsis pam_namespace.so [debug] [unmnt_remnt] [unmnt_only] [require_selinux] [gen_hash] [ignore_config_error] [ignore_instance_parent_mode] [unmount_on_close] [use_current_context] [use_default_context] [mount_private] Description The pam_namespace PAM module sets up a private namespace for a session with polyinstantiated directories. A polyinstantiated directory provides a different instance of itself based on user name, or when using…
pam_mount – A PAM module that can mount volumes for a user session Overview This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as (semi-)diskless stations where many users can logon and where statically mounting the entire /home from a server…
pam_motd – Display the motd file Synopsis pam_motd.so [motd=/path/filename] [motd_dir=/path/dirname.d] Description pam_motd is a PAM module that can be used to display arbitrary motd (message of the day) files after a successful login. By default, pam_motd shows files in the following locations: /etc/motd /run/motd /usr/lib/motd /etc/motd.d/ /run/motd.d/ /usr/lib/motd.d/ Each message size is limited to 64KB….
pam_mkhomedir – PAM module to create users home directory Synopsis pam_mkhomedir.so [silent] [debug] [umask=mode] [skel=skeldir] Description The pam_mkhomedir PAM module will create a users home directory if it does not exist when the session begins. This allows users to be present in central database (such as NIS, kerberos or LDAP) without using a distributed file…
pam_matrix – A PAM test module to retrieve module-specific PAM items Synopsis pam_matrix.so […] Description Testing PAM application often requires to set up an authentication backend with as little effort as possible. The pam_matrix module allows to authenticate against a key-value text file, provided by an option or with an environment variable. Important pam_matrix is…
pam_mapi – Module for authentication via MAPI against a Kopano or Zarafa server Synopsis pam_mapi.so [socket=http://localhost:236/kopano] [socket=http://localhost:236/zarafa] [service=pop3|imap|mobile|outlook] [try_first_pass] [use_first_pass] [quiet] [debug] Description The pam_mapi module is used to verify a username/password pair via MAPI in SOAP against a Kopano server of Kopano Core and a Zarafa server of the Zarafa Collaboration Platform, respectively. Options…
pam_mail – Inform about available mail Synopsis pam_mail.so [close] [debug] [dir=maildir] [empty] [hash=count] [noenv] [nopen] [quiet] [standard] Description The pam_mail PAM module provides the "you have new mail" service to the user. It can be plugged into any application that has credential or session hooks. It gives a single message indicating the newness of any…
pam_loginuid – Record user’s login uid to the process attribute Synopsis pam_loginuid.so [require_auditd] Description The pam_loginuid module sets the loginuid process attribute for the process that was authenticated. This is necessary for applications to be correctly audited. This PAM module should only be used for entry point applications like: login, sshd, gdm, vsftpd, crond and…
pam_localuser – require users to be listed in /etc/passwd Synopsis pam_localuser.so [debug] [file=/path/passwd] Description pam_localuser is a PAM module to help implementing site-wide login policies, where they typically include a subset of the network’s users and a few accounts that are local to a particular workstation. Using pam_localuser and pam_wheel or pam_listfile is an effective…
pam_listfile – deny or allow services based on an arbitrary file Synopsis pam_listfile.so item=[tty|user|rhost|ruser|group|shell] sense=[allow|deny] file=/path/filename onerr=[succeed|fail] [apply=[user|@group]] [quiet] Description pam_listfile is a PAM module which provides a way to deny or allow services based on an arbitrary file. The module gets the item of the type specified — user specifies the username, PAM_USER; tty…
pam_limits – PAM module to limit resources Synopsis pam_limits.so [conf=/path/to/limits.conf] [debug] [set_all] [utmp_early] [noaudit] Description The pam_limits PAM module sets limits on the system resources that can be obtained in a user-session. Users of uid=0 are affected by this limits, too. By default limits are taken from the /etc/security/limits.conf config file. Then individual *.conf files…
pam_ldap – PAM module for LDAP-based authentication Synopsis pam_ldap.so […] Description This is a PAM module that uses an LDAP server to verify user access rights and credentials. Options use_first_pass Specifies that the PAM module should use the first password provided in the authentication stack and not prompt the user for a password. try_first_pass Specifies…