aboutsummaryrefslogtreecommitdiff
path: root/Linux-PAM/modules/pam_localuser/pam_localuser.8
diff options
context:
space:
mode:
authorSteve Langasek <steve.langasek@ubuntu.com>2019-01-03 13:00:10 -0800
committerSteve Langasek <steve.langasek@ubuntu.com>2019-01-03 13:00:10 -0800
commit9d69c7bbb05cc22edce56e751cef5828e652988a (patch)
treeb97c4aa6e6133fa3e319805c5190819020838c32 /Linux-PAM/modules/pam_localuser/pam_localuser.8
parenta6f4ab0bebc76acf85cc0244bd21c1036009c28c (diff)
parentd5b06b67bbeeed7c05c0eb2e05d6a972ad050d1c (diff)
downloadpam-9d69c7bbb05cc22edce56e751cef5828e652988a.tar.gz
pam-9d69c7bbb05cc22edce56e751cef5828e652988a.tar.bz2
pam-9d69c7bbb05cc22edce56e751cef5828e652988a.zip
Merge tag 'upstream/0.99.7.1' into debian
Diffstat (limited to 'Linux-PAM/modules/pam_localuser/pam_localuser.8')
-rw-r--r--Linux-PAM/modules/pam_localuser/pam_localuser.888
1 files changed, 88 insertions, 0 deletions
diff --git a/Linux-PAM/modules/pam_localuser/pam_localuser.8 b/Linux-PAM/modules/pam_localuser/pam_localuser.8
new file mode 100644
index 00000000..e88f0b57
--- /dev/null
+++ b/Linux-PAM/modules/pam_localuser/pam_localuser.8
@@ -0,0 +1,88 @@
+.\" Title: pam_localuser
+.\" Author:
+.\" Generator: DocBook XSL Stylesheets v1.71.0 <http://docbook.sf.net/>
+.\" Date: 12/13/2006
+.\" Manual: Linux\-PAM Manual
+.\" Source: Linux\-PAM Manual
+.\"
+.TH "PAM_LOCALUSER" "8" "12/13/2006" "Linux\-PAM Manual" "Linux\-PAM Manual"
+.\" disable hyphenation
+.nh
+.\" disable justification (adjust text to left margin only)
+.ad l
+.SH "NAME"
+pam_localuser \- require users to be listed in /etc/passwd
+.SH "SYNOPSIS"
+.HP 17
+\fBpam_localuser.so\fR [debug] [file=\fI/path/passwd\fR]
+.SH "DESCRIPTION"
+.PP
+pam_localuser is a PAM module to help implementing site\-wide login policies, where they typically include a subset of the network's users and a few accounts that are local to a particular workstation. Using pam_localuser and pam_wheel or pam_listfile is an effective way to restrict access to either local users and/or a subset of the network's users.
+.PP
+This could also be implemented using pam_listfile.so and a very short awk script invoked by cron, but it's common enough to have been separated out.
+.SH "OPTIONS"
+.PP
+.PP
+\fBdebug\fR
+.RS 3n
+Print debug information.
+.RE
+.PP
+\fBfile=\fR\fB\fI/path/passwd\fR\fR
+.RS 3n
+Use a file other than
+\fI/etc/passwd\fR.
+.RE
+.SH "MODULE SERVICES PROVIDED"
+.PP
+All services (\fBaccount\fR,
+\fBauth\fR,
+\fBpassword\fR
+and
+\fBsession\fR) are supported.
+.SH "RETURN VALUES"
+.PP
+.PP
+PAM_SUCCESS
+.RS 3n
+The new localuser was set successfull.
+.RE
+.PP
+PAM_SERVICE_ERR
+.RS 3n
+No username was given.
+.RE
+.PP
+PAM_USER_UNKNOWN
+.RS 3n
+User not known.
+.RE
+.SH "EXAMPLES"
+.PP
+Add the following line to
+\fI/etc/pam.d/su\fR
+to allow only local users in group wheel to use su.
+.sp
+.RS 3n
+.nf
+account sufficient pam_localuser.so
+account required pam_wheel.so
+
+.fi
+.RE
+.sp
+.SH "FILES"
+.PP
+\fI/etc/passwd\fR
+.RS 3n
+Local user account information.
+.RE
+.SH "SEE ALSO"
+.PP
+
+\fBpam.conf\fR(5),
+\fBpam.d\fR(8),
+\fBpam\fR(8)
+.SH "AUTHOR"
+.PP
+pam_localuser was written by Nalin Dahyabhai <nalin@redhat.com>.