Chapter 6. A reference guide for available modules

Table of Contents

6.1. pam_access - logdaemon style login access control
6.1.1. DESCRIPTION
6.1.2. DESCRIPTION
6.1.3. OPTIONS
6.1.4. MODULE TYPES PROVIDED
6.1.5. RETURN VALUES
6.1.6. FILES
6.1.7. EXAMPLES
6.1.8. AUTHORS
6.2. pam_canonicalize_user - get user name and canonicalize it
6.2.1. DESCRIPTION
6.2.2. OPTIONS
6.2.3. MODULE TYPES PROVIDED
6.2.4. RETURN VALUES
6.2.5. EXAMPLES
6.2.6. AUTHOR
6.3. pam_debug - debug the PAM stack
6.3.1. DESCRIPTION
6.3.2. OPTIONS
6.3.3. MODULE TYPES PROVIDED
6.3.4. RETURN VALUES
6.3.5. EXAMPLES
6.3.6. AUTHOR
6.4. pam_deny - locking-out PAM module
6.4.1. DESCRIPTION
6.4.2. OPTIONS
6.4.3. MODULE TYPES PROVIDED
6.4.4. RETURN VALUES
6.4.5. EXAMPLES
6.4.6. AUTHOR
6.5. pam_echo - print text messages
6.5.1. DESCRIPTION
6.5.2. OPTIONS
6.5.3. MODULE TYPES PROVIDED
6.5.4. RETURN VALUES
6.5.5. EXAMPLES
6.5.6. AUTHOR
6.6. pam_env - set/unset environment variables
6.6.1. DESCRIPTION
6.6.2. DESCRIPTION
6.6.3. OPTIONS
6.6.4. MODULE TYPES PROVIDED
6.6.5. RETURN VALUES
6.6.6. FILES
6.6.7. EXAMPLES
6.6.8. AUTHOR
6.7. pam_exec - call an external command
6.7.1. DESCRIPTION
6.7.2. OPTIONS
6.7.3. MODULE TYPES PROVIDED
6.7.4. RETURN VALUES
6.7.5. EXAMPLES
6.7.6. AUTHOR
6.8. pam_faildelay - change the delay on failure per-application
6.8.1. DESCRIPTION
6.8.2. OPTIONS
6.8.3. MODULE TYPES PROVIDED
6.8.4. RETURN VALUES
6.8.5. EXAMPLES
6.8.6. AUTHOR
6.9. pam_faillock - temporarily locking access based on failed authentication attempts during an interval
6.9.1. DESCRIPTION
6.9.2. OPTIONS
6.9.3. MODULE TYPES PROVIDED
6.9.4. RETURN VALUES
6.9.5. EXAMPLES
6.9.6. AUTHOR
6.10. pam_filter - filter module
6.10.1. DESCRIPTION
6.10.2. OPTIONS
6.10.3. MODULE TYPES PROVIDED
6.10.4. RETURN VALUES
6.10.5. EXAMPLES
6.10.6. AUTHOR
6.11. pam_ftp - module for anonymous access
6.11.1. DESCRIPTION
6.11.2. OPTIONS
6.11.3. MODULE TYPES PROVIDED
6.11.4. RETURN VALUES
6.11.5. EXAMPLES
6.11.6. AUTHOR
6.12. pam_group - module to modify group access
6.12.1. DESCRIPTION
6.12.2. DESCRIPTION
6.12.3. OPTIONS
6.12.4. MODULE TYPES PROVIDED
6.12.5. RETURN VALUES
6.12.6. FILES
6.12.7. EXAMPLES
6.12.8. AUTHORS
6.13. pam_issue - add issue file to user prompt
6.13.1. DESCRIPTION
6.13.2. OPTIONS
6.13.3. MODULE TYPES PROVIDED
6.13.4. RETURN VALUES
6.13.5. EXAMPLES
6.13.6. AUTHOR
6.14. pam_keyinit - display the keyinit file
6.14.1. DESCRIPTION
6.14.2. OPTIONS
6.14.3. MODULE TYPES PROVIDED
6.14.4. RETURN VALUES
6.14.5. EXAMPLES
6.14.6. AUTHOR
6.15. pam_lastlog - display date of last login
6.15.1. DESCRIPTION
6.15.2. OPTIONS
6.15.3. MODULE TYPES PROVIDED
6.15.4. RETURN VALUES
6.15.5. EXAMPLES
6.15.6. AUTHOR
6.16. pam_limits - limit resources
6.16.1. DESCRIPTION
6.16.2. DESCRIPTION
6.16.3. OPTIONS
6.16.4. MODULE TYPES PROVIDED
6.16.5. RETURN VALUES
6.16.6. FILES
6.16.7. EXAMPLES
6.16.8. AUTHORS
6.17. pam_listfile - deny or allow services based on an arbitrary file
6.17.1. DESCRIPTION
6.17.2. OPTIONS
6.17.3. MODULE TYPES PROVIDED
6.17.4. RETURN VALUES
6.17.5. EXAMPLES
6.17.6. AUTHOR
6.18. pam_localuser - require users to be listed in /etc/passwd
6.18.1. DESCRIPTION
6.18.2. OPTIONS
6.18.3. MODULE TYPES PROVIDED
6.18.4. RETURN VALUES
6.18.5. EXAMPLES
6.18.6. AUTHOR
6.19. pam_loginuid - record user's login uid to the process attribute
6.19.1. DESCRIPTION
6.19.2. OPTIONS
6.19.3. MODULE TYPES PROVIDED
6.19.4. RETURN VALUES
6.19.5. EXAMPLES
6.19.6. AUTHOR
6.20. pam_mail - inform about available mail
6.20.1. DESCRIPTION
6.20.2. OPTIONS
6.20.3. MODULE TYPES PROVIDED
6.20.4. RETURN VALUES
6.20.5. EXAMPLES
6.20.6. AUTHOR
6.21. pam_mkhomedir - create users home directory
6.21.1. DESCRIPTION
6.21.2. OPTIONS
6.21.3. MODULE TYPES PROVIDED
6.21.4. RETURN VALUES
6.21.5. EXAMPLES
6.21.6. AUTHOR
6.22. pam_motd - display the motd file
6.22.1. DESCRIPTION
6.22.2. OPTIONS
6.22.3. MODULE TYPES PROVIDED
6.22.4. RETURN VALUES
6.22.5. EXAMPLES
6.22.6. AUTHOR
6.23. pam_namespace - setup a private namespace
6.23.1. DESCRIPTION
6.23.2. DESCRIPTION
6.23.3. OPTIONS
6.23.4. MODULE TYPES PROVIDED
6.23.5. RETURN VALUES
6.23.6. FILES
6.23.7. EXAMPLES
6.23.8. AUTHORS
6.24. pam_nologin - prevent non-root users from login
6.24.1. DESCRIPTION
6.24.2. OPTIONS
6.24.3. MODULE TYPES PROVIDED
6.24.4. RETURN VALUES
6.24.5. EXAMPLES
6.24.6. AUTHOR
6.25. pam_permit - the promiscuous module
6.25.1. DESCRIPTION
6.25.2. OPTIONS
6.25.3. MODULE TYPES PROVIDED
6.25.4. RETURN VALUES
6.25.5. EXAMPLES
6.25.6. AUTHOR
6.26. pam_pwhistory - grant access using .pwhistory file
6.26.1. DESCRIPTION
6.26.2. OPTIONS
6.26.3. MODULE TYPES PROVIDED
6.26.4. RETURN VALUES
6.26.5. FILES
6.26.6. EXAMPLES
6.26.7. AUTHOR
6.27. pam_rhosts - grant access using .rhosts file
6.27.1. DESCRIPTION
6.27.2. OPTIONS
6.27.3. MODULE TYPES PROVIDED
6.27.4. RETURN VALUES
6.27.5. EXAMPLES
6.27.6. AUTHOR
6.28. pam_rootok - gain only root access
6.28.1. DESCRIPTION
6.28.2. OPTIONS
6.28.3. MODULE TYPES PROVIDED
6.28.4. RETURN VALUES
6.28.5. EXAMPLES
6.28.6. AUTHOR
6.29. pam_securetty - limit root login to special devices
6.29.1. DESCRIPTION
6.29.2. OPTIONS
6.29.3. MODULE TYPES PROVIDED
6.29.4. RETURN VALUES
6.29.5. EXAMPLES
6.29.6. AUTHOR
6.30. pam_selinux - set the default security context
6.30.1. DESCRIPTION
6.30.2. OPTIONS
6.30.3. MODULE TYPES PROVIDED
6.30.4. RETURN VALUES
6.30.5. EXAMPLES
6.30.6. AUTHOR
6.31. pam_sepermit - allow/reject access based on SELinux mode
6.31.1. DESCRIPTION
6.31.2. OPTIONS
6.31.3. MODULE TYPES PROVIDED
6.31.4. RETURN VALUES
6.31.5. FILES
6.31.6. EXAMPLES
6.31.7. AUTHOR
6.32. pam_setquota - set or modify disk quotas on session start
6.32.1. DESCRIPTION
6.32.2. OPTIONS
6.32.3. MODULE TYPES PROVIDED
6.32.4. RETURN VALUES
6.32.5. EXAMPLES
6.32.6. AUTHOR
6.33. pam_shells - check for valid login shell
6.33.1. DESCRIPTION
6.33.2. OPTIONS
6.33.3. MODULE TYPES PROVIDED
6.33.4. RETURN VALUES
6.33.5. EXAMPLES
6.33.6. AUTHOR
6.34. pam_succeed_if - test account characteristics
6.34.1. DESCRIPTION
6.34.2. OPTIONS
6.34.3. MODULE TYPES PROVIDED
6.34.4. RETURN VALUES
6.34.5. EXAMPLES
6.34.6. AUTHOR
6.35. pam_time - time controlled access
6.35.1. DESCRIPTION
6.35.2. DESCRIPTION
6.35.3. OPTIONS
6.35.4. MODULE TYPES PROVIDED
6.35.5. RETURN VALUES
6.35.6. FILES
6.35.7. EXAMPLES
6.35.8. AUTHOR
6.36. pam_timestamp - authenticate using cached successful authentication attempts
6.36.1. DESCRIPTION
6.36.2. OPTIONS
6.36.3. MODULE TYPES PROVIDED
6.36.4. RETURN VALUES
6.36.5. NOTES
6.36.6. EXAMPLES
6.36.7. FILES
6.36.8. AUTHOR
6.37. pam_tty_audit - enable/disable tty auditing
6.37.1. DESCRIPTION
6.37.2. OPTIONS
6.37.3. MODULE TYPES PROVIDED
6.37.4. RETURN VALUES
6.37.5. NOTES
6.37.6. EXAMPLES
6.37.7. AUTHOR
6.38. pam_umask - set the file mode creation mask
6.38.1. DESCRIPTION
6.38.2. OPTIONS
6.38.3. MODULE TYPES PROVIDED
6.38.4. RETURN VALUES
6.38.5. EXAMPLES
6.38.6. AUTHOR
6.39. pam_unix - traditional password authentication
6.39.1. DESCRIPTION
6.39.2. OPTIONS
6.39.3. MODULE TYPES PROVIDED
6.39.4. RETURN VALUES
6.39.5. EXAMPLES
6.39.6. AUTHOR
6.40. pam_userdb - authenticate against a db database
6.40.1. DESCRIPTION
6.40.2. OPTIONS
6.40.3. MODULE TYPES PROVIDED
6.40.4. RETURN VALUES
6.40.5. EXAMPLES
6.40.6. AUTHOR
6.41. pam_warn - logs all PAM items
6.41.1. DESCRIPTION
6.41.2. OPTIONS
6.41.3. MODULE TYPES PROVIDED
6.41.4. RETURN VALUES
6.41.5. EXAMPLES
6.41.6. AUTHOR
6.42. pam_wheel - only permit root access to members of group wheel
6.42.1. DESCRIPTION
6.42.2. OPTIONS
6.42.3. MODULE TYPES PROVIDED
6.42.4. RETURN VALUES
6.42.5. EXAMPLES
6.42.6. AUTHOR
6.43. pam_xauth - forward xauth keys between users
6.43.1. DESCRIPTION
6.43.2. OPTIONS
6.43.3. MODULE TYPES PROVIDED
6.43.4. RETURN VALUES
6.43.5. EXAMPLES
6.43.6. AUTHOR

Here, we collect together the descriptions of the various modules coming with Linux-PAM.