The Linux Manuals (man pages) document is an important part of Linux documents. Linux Manuals are organized as several sections. Each section has a group of commands for a specific area in Linux usage, administration or development.
pam_lastlog – PAM module to display date of last login and perform inactive account lock out Synopsis pam_lastlog.so [debug] [silent] [never] [nodate] [nohost] [noterm] [nowtmp] [noupdate] [showfailed] [inactive=<days>] [unlimited] Description pam_lastlog is a PAM module to display a line of information about the last login of the user. In addition, the module maintains the /var/log/lastlog…
/$LIB/security/pam_krb5/pam_krb5_storetmp – Temporary file helper Synopsis pam_krb5_storetmp pattern [uid] [gid] Description The pam_krb5.so module uses pam_krb5_storetmp to create and remove temporary files. It is not intended for any other use. Arguments pattern A filename pattern of the form /tmp/fooXXXXXX. A temporary file will be created using mkstemp(3) and any data provided to standard input will…
//usr/$LIB/security/pam_krb5/pam_krb5_cchelper – Credential cache helper Synopsis pam_krb5_cchelper [-c|-u|-d] [ccname] [uid] [gid] Description The pam_krb5.so module uses pam_krb5_cchelper to create, update, and remove credential caches. Arguments -c|-u|-d A flag indicating whether the helper is expected to create, update, or destroy a ccache. When creating a ccache, the ccname argument should be a name or a pattern…
pam_krb5 – Kerberos 5 authentication Synopsis auth required //usr/$LIB/security/pam_krb5.so session optional //usr/$LIB/security/pam_krb5.so account sufficient //usr/$LIB/security/pam_krb5.so password sufficient //usr/$LIB/security/pam_krb5.so Description The pam_krb5.so module is designed to allow smooth integration of Kerberos 5 password-checking for applications which use PAM. It creates session-specific credential caches. If the system is an AFS client, it will also attempt to obtain…
pam_keyinit – Kernel session keyring initialiser module Synopsis pam_keyinit.so [debug] [force] [revoke] Description The pam_keyinit PAM module ensures that the invoking process has a session keyring other than the user default session keyring. The module checks to see if the process’s session keyring is the user-session-keyring(7), and, if it is, creates a new session-keyring(7) with…
pam_issue – PAM module to add issue file to user prompt Synopsis pam_issue.so [noesc] [issue=issue-file-name] Description pam_issue is a PAM module to prepend an issue file to the username prompt. It also by default parses escape codes in the issue file similar to some common getty’s (using ormat). Recognized escapes: \d current day \l name…
pam_group – PAM module for group access Synopsis pam_group.so Description The pam_group PAM module does not authenticate the user, but instead it grants group memberships (in the credential setting phase of the authentication module) to the user. Such memberships are based on the service they are applying for. By default rules for group memberships are…
pam_getenv – get environment variables from /etc/environment Synopsis pam_getenv [-l] [-s] env_var Description This tool will print out the value of env_var from /etc/environment. It will attempt to expand environment variable references in the definition of env_var but will fail if PAM items are expanded. The -l option indicates the script should return an environment…
pam_get_items – A PAM test module to retrieve module-specific PAM items Synopsis pam_get_items.so Description PAM modules store data in PAM items. These items are only accessible from module context, not application context as they might include private data (PAM_AUTHTOK normally contains the password). But when testing PAM modules, it’s often nice to make sure a…
pam_ftp – PAM module for anonymous access module Synopsis pam_ftp.so [debug] [ignore] [users=XXX,YYY,…] Description pam_ftp is a PAM module which provides a pluggable anonymous ftp mode of access. This module intercepts the user’s name and password. If the name is ftp or anonymous, the user’s password is broken up at the @ delimiter into a…
pam_fprintd – PAM module to authenticate against fprintd, the fingerprint daemon Synopsis pam_fprintd.so [debug|debug=[on|off|true|false|1|0]] [max-tries=MAX_TRIES] [timeout=TIMEOUT] Description The pam_fprintd module is used to verify a user’s fingerprints against fingerprints enrolled using fprintd, the fingerprint management daemon. Options debug debug=[on|off|true|false|1|0] Whether debug should be turned on or off. Debug messages will be generated using pam_syslog which…
pam_filter – PAM filter module Synopsis pam_filter.so [debug] [new_term] [non_term] run1|run2 filter […] Description This module is intended to be a platform for providing access to all of the input/output that passes between the user and the application. It is only suitable for tty-based and (stdin/stdout) applications. To function this module requires filters to be…
pam_faillock – Module counting authentication failures during a specified interval Synopsis auth … pam_faillock.so {preauth|authfail|authsucc} [conf=/path/to/config-file] [dir=/path/to/tally-directory] [even_deny_root] [deny=n] [fail_interval=n] [unlock_time=n] [root_unlock_time=n] [admin_group=name] [audit] [silent] [no_log_info] account … pam_faillock.so [dir=/path/to/tally-directory] [no_log_info] Description This module maintains a list of failed authentication attempts per user during a specified interval and locks the account in case there were…
pam_faildelay – Change the delay on failure per-application Synopsis pam_faildelay.so [debug] [delay=microseconds] Description pam_faildelay is a PAM module that can be used to set the delay on failure per-application. If no delay is given, pam_faildelay will use the value of FAIL_DELAY from /etc/login.defs. Options debug Turns on debugging messages sent to syslog. delay=N Set the…
pam_extrausers – Module for libnss-extrausers authentication Synopsis pam_extrausers.so […] Description This is similar to the standard Unix authentication module pam_unix. But instead of using /etc/passwd and /etc/shadow, it uses /var/lib/extrausers/passwd and /var/lib/extrausers/shadow. The account component performs the task of establishing the status of the user’s account and password based on the following shadow elements: expire,…
pam_exec – PAM module which calls an external command Synopsis pam_exec.so [debug] [expose_authtok] [seteuid] [quiet] [stdout] [log=file] [type=type] command […] Description pam_exec is a PAM module that can be used to run an external command. The child’s environment is set to the current PAM environment list, as returned by pam_getenvlist(3) In addition, the following PAM…
pam_env – PAM module to set/unset environment variables Synopsis pam_env.so [debug] [conffile=conf-file] [envfile=env-file] [readenv=0|1] [user_envfile=env-file] [user_readenv=0|1] Description The pam_env PAM module allows the (un)setting of environment variables. Supported is the use of previously set environment variables as well as PAM_ITEMs such as PAM_RHOST. By default rules for (un)setting of variables is taken from the config…
pam_ecryptfs – PAM module for eCryptfs Synopsis pam_ecryptfs.so [unwrap] Description pam_ecryptfs is a PAM module that can use the login password to unwrap an ecryptfs mount passphrase stored in ~/.ecryptfs/wrapped-passphrase, and automatically mount a private cryptographic directory. Options unwrap Use the login passphrase to unwrap an eCryptfs mount passphrase. Module Services Provided The services auth,…
pam_echo – PAM module for printing text messages Synopsis pam_echo.so [file=/path/message] Description The pam_echo PAM module is for printing text messages to inform user about special things. Sequences starting with the % character are interpreted in the following way: %H The name of the remote host (PAM_RHOST). %h The name of the local host. %s…
pam_deny – The locking-out PAM module Synopsis pam_deny.so Description This module can be used to deny access. It always indicates a failure to the application through the PAM framework. It might be suitable for using for default (the OTHER) entries. Options This module does not recognise any options. Module Types Provided All module types (account,…