xref: /dflybsd-src/lib/libpam/modules/pam_guest/pam_guest.8 (revision c98db40744766ab0803912f29557df02814bcd9d)
1242be47eSzrj.\" Copyright (c) 2003 Networks Associates Technology, Inc.
2242be47eSzrj.\" All rights reserved.
3242be47eSzrj.\"
4242be47eSzrj.\" Portions of this software were developed for the FreeBSD Project by
5242be47eSzrj.\" ThinkSec AS and NAI Labs, the Security Research Division of Network
6242be47eSzrj.\" Associates, Inc.  under DARPA/SPAWAR contract N66001-01-C-8035
7242be47eSzrj.\" ("CBOSS"), as part of the DARPA CHATS research program.
8242be47eSzrj.\"
9242be47eSzrj.\" Redistribution and use in source and binary forms, with or without
10242be47eSzrj.\" modification, are permitted provided that the following conditions
11242be47eSzrj.\" are met:
12242be47eSzrj.\" 1. Redistributions of source code must retain the above copyright
13242be47eSzrj.\"    notice, this list of conditions and the following disclaimer.
14242be47eSzrj.\" 2. Redistributions in binary form must reproduce the above copyright
15242be47eSzrj.\"    notice, this list of conditions and the following disclaimer in the
16242be47eSzrj.\"    documentation and/or other materials provided with the distribution.
17242be47eSzrj.\" 3. The name of the author may not be used to endorse or promote
18242be47eSzrj.\"    products derived from this software without specific prior written
19242be47eSzrj.\"    permission.
20242be47eSzrj.\"
21242be47eSzrj.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
22242be47eSzrj.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23242be47eSzrj.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24242be47eSzrj.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
25242be47eSzrj.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26242be47eSzrj.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27242be47eSzrj.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28242be47eSzrj.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29242be47eSzrj.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30242be47eSzrj.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31242be47eSzrj.\" SUCH DAMAGE.
32242be47eSzrj.\"
33*c98db407SSascha Wildner.\" $FreeBSD: head/lib/libpam/modules/pam_guest/pam_guest.8 276294 2014-12-27 08:31:52Z joel $
34242be47eSzrj.\"
35242be47eSzrj.Dd May 26, 2003
36242be47eSzrj.Dt PAM_GUEST 8
37242be47eSzrj.Os
38242be47eSzrj.Sh NAME
39242be47eSzrj.Nm pam_guest
40242be47eSzrj.Nd Guest PAM module
41242be47eSzrj.Sh SYNOPSIS
42242be47eSzrj.Op Ar service-name
43242be47eSzrj.Ar module-type
44242be47eSzrj.Ar control-flag
45242be47eSzrj.Pa pam_guest
46242be47eSzrj.Op Ar arguments
47242be47eSzrj.Sh DESCRIPTION
48242be47eSzrjThe guest service module for PAM allows guest logins.
49242be47eSzrjIf successful, the
50242be47eSzrj.Nm
51242be47eSzrjmodule sets the PAM environment variable
52242be47eSzrj.Ev GUEST
53242be47eSzrjto the login name.
54242be47eSzrjThe application can check this variable using
55242be47eSzrj.Xr pam_getenv 3
56242be47eSzrjto differentiate guest logins from normal logins.
57242be47eSzrj.Pp
58242be47eSzrjThe following options may be passed to the
59242be47eSzrj.Nm
60242be47eSzrjmodule:
61242be47eSzrj.Bl -tag -width ".Cm pass_as_ruser"
62242be47eSzrj.It Cm guests Ns = Ns Ar list
63242be47eSzrjComma-separated list of guest account names.
64242be47eSzrjThe default is
65242be47eSzrj.Dq Li guest .
66242be47eSzrjA typical value for
67242be47eSzrj.Xr ftpd 8
68242be47eSzrjwould be
69242be47eSzrj.Dq Li anonymous,ftp .
70242be47eSzrj.It Cm nopass
71242be47eSzrjOmits the password prompt if the target account is on the list of
72242be47eSzrjguest accounts.
73242be47eSzrj.It Cm pass_as_ruser
74242be47eSzrjThe password typed in by the user is exported as the
75242be47eSzrj.Dv PAM_RUSER
76242be47eSzrjitem.
77242be47eSzrjThis is useful for applications like
78242be47eSzrj.Xr ftpd 8
79242be47eSzrjwhere guest users are encouraged to use their email address as
80242be47eSzrjpassword.
81242be47eSzrj.It Cm pass_is_user
82242be47eSzrjRequires the guest user to type in the guest account name as password.
83242be47eSzrj.El
84242be47eSzrj.Sh SEE ALSO
85dfc0c85aSSascha Wildner.Xr pam 3 ,
86242be47eSzrj.Xr pam_getenv 3 ,
87242be47eSzrj.Xr pam_get_item 3 ,
88dfc0c85aSSascha Wildner.Xr pam.conf 5
89242be47eSzrj.Sh AUTHORS
90242be47eSzrjThe
91242be47eSzrj.Nm
92242be47eSzrjmodule and this manual page were developed for the
93242be47eSzrj.Fx
94242be47eSzrjProject by
95242be47eSzrjThinkSec AS and NAI Labs, the Security Research Division of Network
96242be47eSzrjAssociates, Inc.\& under DARPA/SPAWAR contract N66001-01-C-8035
97242be47eSzrj.Pq Dq CBOSS ,
98242be47eSzrjas part of the DARPA CHATS research program.
99