1*2f6bdc4aSthorpej.\" $NetBSD: pam_self.8,v 1.3 2005/02/26 15:14:15 thorpej Exp $ 26f11bdf1Schristos.\" Copyright (c) 2001 Mark R V Murray 36f11bdf1Schristos.\" All rights reserved. 46f11bdf1Schristos.\" Copyright (c) 2001 Networks Associates Technology, Inc. 56f11bdf1Schristos.\" All rights reserved. 66f11bdf1Schristos.\" 76f11bdf1Schristos.\" Portions of this software were developed for the FreeBSD Project by 86f11bdf1Schristos.\" ThinkSec AS and NAI Labs, the Security Research Division of Network 96f11bdf1Schristos.\" Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 106f11bdf1Schristos.\" ("CBOSS"), as part of the DARPA CHATS research program. 116f11bdf1Schristos.\" 126f11bdf1Schristos.\" Redistribution and use in source and binary forms, with or without 136f11bdf1Schristos.\" modification, are permitted provided that the following conditions 146f11bdf1Schristos.\" are met: 156f11bdf1Schristos.\" 1. Redistributions of source code must retain the above copyright 166f11bdf1Schristos.\" notice, this list of conditions and the following disclaimer. 176f11bdf1Schristos.\" 2. Redistributions in binary form must reproduce the above copyright 186f11bdf1Schristos.\" notice, this list of conditions and the following disclaimer in the 196f11bdf1Schristos.\" documentation and/or other materials provided with the distribution. 206f11bdf1Schristos.\" 3. The name of the author may not be used to endorse or promote 216f11bdf1Schristos.\" products derived from this software without specific prior written 226f11bdf1Schristos.\" permission. 236f11bdf1Schristos.\" 246f11bdf1Schristos.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 256f11bdf1Schristos.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 266f11bdf1Schristos.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 276f11bdf1Schristos.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 286f11bdf1Schristos.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 296f11bdf1Schristos.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 306f11bdf1Schristos.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 316f11bdf1Schristos.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 326f11bdf1Schristos.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 336f11bdf1Schristos.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 346f11bdf1Schristos.\" SUCH DAMAGE. 356f11bdf1Schristos.\" 366f11bdf1Schristos.\" $FreeBSD: src/lib/libpam/modules/pam_self/pam_self.8,v 1.11 2004/07/02 23:52:18 ru Exp $ 376f11bdf1Schristos.\" 386f11bdf1Schristos.Dd December 5, 2001 396f11bdf1Schristos.Dt PAM_SELF 8 406f11bdf1Schristos.Os 416f11bdf1Schristos.Sh NAME 426f11bdf1Schristos.Nm pam_self 436f11bdf1Schristos.Nd Self PAM module 446f11bdf1Schristos.Sh SYNOPSIS 456f11bdf1Schristos.Op Ar service-name 466f11bdf1Schristos.Ar module-type 476f11bdf1Schristos.Ar control-flag 486f11bdf1Schristos.Pa pam_self 496f11bdf1Schristos.Op Ar options 506f11bdf1Schristos.Sh DESCRIPTION 51*2f6bdc4aSthorpejThe Self authentication service module for PAM 526f11bdf1Schristosprovides functionality for only one PAM category: 536f11bdf1Schristosauthentication. 546f11bdf1SchristosIn terms of the 556f11bdf1Schristos.Ar module-type 566f11bdf1Schristosparameter, this is the 576f11bdf1Schristos.Dq Li auth 586f11bdf1Schristosfeature. 596f11bdf1Schristos.Ss Self Authentication Module 606f11bdf1SchristosThe Self authentication component 616f11bdf1Schristos.Pq Fn pam_sm_authenticate , 626f11bdf1Schristosreturns success if and only if the target user's user ID is identical 636f11bdf1Schristoswith the current real user ID. 646f11bdf1SchristosIf the current real user ID is zero, authentication will fail, 656f11bdf1Schristosunless the 666f11bdf1Schristos.Cm allow_root 676f11bdf1Schristosoption was specified. 686f11bdf1Schristos.Pp 696f11bdf1SchristosThe following options may be passed to the authentication module: 706f11bdf1Schristos.Bl -tag -width ".Cm allow_root" 716f11bdf1Schristos.It Cm debug 726f11bdf1Schristos.Xr syslog 3 736f11bdf1Schristosdebugging information at 746f11bdf1Schristos.Dv LOG_DEBUG 756f11bdf1Schristoslevel. 766f11bdf1Schristos.It Cm no_warn 776f11bdf1Schristossuppress warning messages to the user. 786f11bdf1SchristosThese messages include reasons why the user's authentication attempt 796f11bdf1Schristoswas declined. 806f11bdf1Schristos.It Cm allow_root 816f11bdf1Schristosdo not automatically fail if the current real user ID is 0. 826f11bdf1Schristos.El 836f11bdf1Schristos.Sh SEE ALSO 846f11bdf1Schristos.Xr getuid 2 , 856f11bdf1Schristos.Xr pam.conf 5 , 866f11bdf1Schristos.Xr pam 8 876f11bdf1Schristos.Sh AUTHORS 886f11bdf1SchristosThe 896f11bdf1Schristos.Nm 906f11bdf1Schristosmodule and this manual page were developed for the 916f11bdf1Schristos.Fx 926f11bdf1SchristosProject by 936f11bdf1SchristosThinkSec AS and NAI Labs, the Security Research Division of Network 946f11bdf1SchristosAssociates, Inc.\& under DARPA/SPAWAR contract N66001-01-C-8035 956f11bdf1Schristos.Pq Dq CBOSS , 966f11bdf1Schristosas part of the DARPA CHATS research program. 97