xref: /netbsd-src/lib/libpam/modules/pam_self/pam_self.8 (revision 2f6bdc4a7b54dd45c5faf1958c4d9fd0dbe06dfd)
1*2f6bdc4aSthorpej.\" $NetBSD: pam_self.8,v 1.3 2005/02/26 15:14:15 thorpej Exp $
26f11bdf1Schristos.\" Copyright (c) 2001 Mark R V Murray
36f11bdf1Schristos.\" All rights reserved.
46f11bdf1Schristos.\" Copyright (c) 2001 Networks Associates Technology, Inc.
56f11bdf1Schristos.\" All rights reserved.
66f11bdf1Schristos.\"
76f11bdf1Schristos.\" Portions of this software were developed for the FreeBSD Project by
86f11bdf1Schristos.\" ThinkSec AS and NAI Labs, the Security Research Division of Network
96f11bdf1Schristos.\" Associates, Inc.  under DARPA/SPAWAR contract N66001-01-C-8035
106f11bdf1Schristos.\" ("CBOSS"), as part of the DARPA CHATS research program.
116f11bdf1Schristos.\"
126f11bdf1Schristos.\" Redistribution and use in source and binary forms, with or without
136f11bdf1Schristos.\" modification, are permitted provided that the following conditions
146f11bdf1Schristos.\" are met:
156f11bdf1Schristos.\" 1. Redistributions of source code must retain the above copyright
166f11bdf1Schristos.\"    notice, this list of conditions and the following disclaimer.
176f11bdf1Schristos.\" 2. Redistributions in binary form must reproduce the above copyright
186f11bdf1Schristos.\"    notice, this list of conditions and the following disclaimer in the
196f11bdf1Schristos.\"    documentation and/or other materials provided with the distribution.
206f11bdf1Schristos.\" 3. The name of the author may not be used to endorse or promote
216f11bdf1Schristos.\"    products derived from this software without specific prior written
226f11bdf1Schristos.\"    permission.
236f11bdf1Schristos.\"
246f11bdf1Schristos.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
256f11bdf1Schristos.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
266f11bdf1Schristos.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
276f11bdf1Schristos.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
286f11bdf1Schristos.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
296f11bdf1Schristos.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
306f11bdf1Schristos.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
316f11bdf1Schristos.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
326f11bdf1Schristos.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
336f11bdf1Schristos.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
346f11bdf1Schristos.\" SUCH DAMAGE.
356f11bdf1Schristos.\"
366f11bdf1Schristos.\" $FreeBSD: src/lib/libpam/modules/pam_self/pam_self.8,v 1.11 2004/07/02 23:52:18 ru Exp $
376f11bdf1Schristos.\"
386f11bdf1Schristos.Dd December 5, 2001
396f11bdf1Schristos.Dt PAM_SELF 8
406f11bdf1Schristos.Os
416f11bdf1Schristos.Sh NAME
426f11bdf1Schristos.Nm pam_self
436f11bdf1Schristos.Nd Self PAM module
446f11bdf1Schristos.Sh SYNOPSIS
456f11bdf1Schristos.Op Ar service-name
466f11bdf1Schristos.Ar module-type
476f11bdf1Schristos.Ar control-flag
486f11bdf1Schristos.Pa pam_self
496f11bdf1Schristos.Op Ar options
506f11bdf1Schristos.Sh DESCRIPTION
51*2f6bdc4aSthorpejThe Self authentication service module for PAM
526f11bdf1Schristosprovides functionality for only one PAM category:
536f11bdf1Schristosauthentication.
546f11bdf1SchristosIn terms of the
556f11bdf1Schristos.Ar module-type
566f11bdf1Schristosparameter, this is the
576f11bdf1Schristos.Dq Li auth
586f11bdf1Schristosfeature.
596f11bdf1Schristos.Ss Self Authentication Module
606f11bdf1SchristosThe Self authentication component
616f11bdf1Schristos.Pq Fn pam_sm_authenticate ,
626f11bdf1Schristosreturns success if and only if the target user's user ID is identical
636f11bdf1Schristoswith the current real user ID.
646f11bdf1SchristosIf the current real user ID is zero, authentication will fail,
656f11bdf1Schristosunless the
666f11bdf1Schristos.Cm allow_root
676f11bdf1Schristosoption was specified.
686f11bdf1Schristos.Pp
696f11bdf1SchristosThe following options may be passed to the authentication module:
706f11bdf1Schristos.Bl -tag -width ".Cm allow_root"
716f11bdf1Schristos.It Cm debug
726f11bdf1Schristos.Xr syslog 3
736f11bdf1Schristosdebugging information at
746f11bdf1Schristos.Dv LOG_DEBUG
756f11bdf1Schristoslevel.
766f11bdf1Schristos.It Cm no_warn
776f11bdf1Schristossuppress warning messages to the user.
786f11bdf1SchristosThese messages include reasons why the user's authentication attempt
796f11bdf1Schristoswas declined.
806f11bdf1Schristos.It Cm allow_root
816f11bdf1Schristosdo not automatically fail if the current real user ID is 0.
826f11bdf1Schristos.El
836f11bdf1Schristos.Sh SEE ALSO
846f11bdf1Schristos.Xr getuid 2 ,
856f11bdf1Schristos.Xr pam.conf 5 ,
866f11bdf1Schristos.Xr pam 8
876f11bdf1Schristos.Sh AUTHORS
886f11bdf1SchristosThe
896f11bdf1Schristos.Nm
906f11bdf1Schristosmodule and this manual page were developed for the
916f11bdf1Schristos.Fx
926f11bdf1SchristosProject by
936f11bdf1SchristosThinkSec AS and NAI Labs, the Security Research Division of Network
946f11bdf1SchristosAssociates, Inc.\& under DARPA/SPAWAR contract N66001-01-C-8035
956f11bdf1Schristos.Pq Dq CBOSS ,
966f11bdf1Schristosas part of the DARPA CHATS research program.
97