1*d61c7b6eSwiz.\" $NetBSD: pam_afslog.8,v 1.2 2005/09/23 19:56:16 wiz Exp $ 24019a421Stsarna.\" 34019a421Stsarna.\" Copyright 2005 Tyler C. Sarna <tsarna@netbsd.org> 44019a421Stsarna.\" 54019a421Stsarna.\" This code is derived from software contributed to The NetBSD Foundation 64019a421Stsarna.\" by Tyler C. Sarna 74019a421Stsarna.\" 84019a421Stsarna.\" Redistribution and use in source and binary forms, with or without 94019a421Stsarna.\" modification, are permitted provided that the following conditions 104019a421Stsarna.\" are met: 114019a421Stsarna.\" 1. Redistributions of source code must retain the above copyright 124019a421Stsarna.\" notice, this list of conditions and the following disclaimer. 134019a421Stsarna.\" 2. Neither the name of The NetBSD Foundation nor the names of its 144019a421Stsarna.\" contributors may be used to endorse or promote products derived 154019a421Stsarna.\" from this software without specific prior written permission. 164019a421Stsarna.\" 174019a421Stsarna.\" THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 184019a421Stsarna.\" ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 194019a421Stsarna.\" TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 204019a421Stsarna.\" PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 214019a421Stsarna.\" BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 224019a421Stsarna.\" CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 234019a421Stsarna.\" SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 244019a421Stsarna.\" INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 254019a421Stsarna.\" CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 264019a421Stsarna.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 274019a421Stsarna.\" POSSIBILITY OF SUCH DAMAGE. 284019a421Stsarna.\" 294019a421Stsarna.Dd September 20, 2005 304019a421Stsarna.Dt PAM_AFSLOG 8 314019a421Stsarna.Os 324019a421Stsarna.Sh NAME 334019a421Stsarna.Nm pam_afslog 344019a421Stsarna.Nd AFS credentials PAM module 354019a421Stsarna.Sh SYNOPSIS 364019a421Stsarna.Op Ar service-name 374019a421Stsarna.Ar module-type 384019a421Stsarna.Ar control-flag 394019a421Stsarna.Pa pam_afslog 404019a421Stsarna.Op Ar arguments 414019a421Stsarna.Sh DESCRIPTION 42*d61c7b6eSwizThe 43*d61c7b6eSwiz.Nm 44*d61c7b6eSwizauthentication service module for PAM provides functionality for 45*d61c7b6eSwizonly one PAM category: authentication 464019a421Stsarna.Ar ( module-type 474019a421Stsarnaof 484019a421Stsarna.Dq Li auth ) . 494019a421Stsarna.Pp 504019a421StsarnaThe 514019a421Stsarna.Fn pam_sm_authenticate 524019a421Stsarnafunction does nothing and thus the module should be used with an 534019a421Stsarna.Ar control-flag 544019a421Stsarnaof 554019a421Stsarna.Dq Li optional . 564019a421Stsarna.Pp 574019a421StsarnaThe value of the module comes from its 584019a421Stsarna.Fn pam_sm_setcred 594019a421Stsarnafunction. 604019a421StsarnaIf the 614019a421Stsarna.Ar afslog 624019a421Stsarnaparameter is enabled in 634019a421Stsarna.Xr krb5.conf 5 , 64*d61c7b6eSwizthen the module will take Kerberos 5 credentials from the cache 65*d61c7b6eSwizcreated by 664019a421Stsarna.Xr pam_krb5 8 674019a421Stsarnaand convert them into AFS tokens, after first creating a PAG (Process 684019a421StsarnaAuthentication Group) if necessary. 694019a421Stsarna.Sh SEE ALSO 704019a421Stsarna.Xr kafs 3 , 714019a421Stsarna.Xr pam.conf 5 , 72*d61c7b6eSwiz.Xr pam 8 , 73*d61c7b6eSwiz.Xr pam_krb5 8 744019a421Stsarna.Sh HISTORY 754019a421StsarnaThe 764019a421Stsarna.Nm 774019a421Stsarnamodule was developed for 784019a421Stsarna.Nx 79*d61c7b6eSwizby 80*d61c7b6eSwiz.An Tyler C. Sarna . 814019a421StsarnaThe 824019a421Stsarna.Nm 834019a421Stsarnamodule appeared in 844019a421Stsarna.Nx 4.0 . 85