1242be47eSzrj.\" Copyright (c) 2003 Networks Associates Technology, Inc. 2242be47eSzrj.\" All rights reserved. 3242be47eSzrj.\" 4242be47eSzrj.\" Portions of this software were developed for the FreeBSD Project by 5242be47eSzrj.\" ThinkSec AS and NAI Labs, the Security Research Division of Network 6242be47eSzrj.\" Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 7242be47eSzrj.\" ("CBOSS"), as part of the DARPA CHATS research program. 8242be47eSzrj.\" 9242be47eSzrj.\" Redistribution and use in source and binary forms, with or without 10242be47eSzrj.\" modification, are permitted provided that the following conditions 11242be47eSzrj.\" are met: 12242be47eSzrj.\" 1. Redistributions of source code must retain the above copyright 13242be47eSzrj.\" notice, this list of conditions and the following disclaimer. 14242be47eSzrj.\" 2. Redistributions in binary form must reproduce the above copyright 15242be47eSzrj.\" notice, this list of conditions and the following disclaimer in the 16242be47eSzrj.\" documentation and/or other materials provided with the distribution. 17242be47eSzrj.\" 3. The name of the author may not be used to endorse or promote 18242be47eSzrj.\" products derived from this software without specific prior written 19242be47eSzrj.\" permission. 20242be47eSzrj.\" 21242be47eSzrj.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 22242be47eSzrj.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23242be47eSzrj.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24242be47eSzrj.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 25242be47eSzrj.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26242be47eSzrj.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27242be47eSzrj.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28242be47eSzrj.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29242be47eSzrj.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30242be47eSzrj.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31242be47eSzrj.\" SUCH DAMAGE. 32242be47eSzrj.\" 33*c98db407SSascha Wildner.\" $FreeBSD: head/lib/libpam/modules/pam_guest/pam_guest.8 276294 2014-12-27 08:31:52Z joel $ 34242be47eSzrj.\" 35242be47eSzrj.Dd May 26, 2003 36242be47eSzrj.Dt PAM_GUEST 8 37242be47eSzrj.Os 38242be47eSzrj.Sh NAME 39242be47eSzrj.Nm pam_guest 40242be47eSzrj.Nd Guest PAM module 41242be47eSzrj.Sh SYNOPSIS 42242be47eSzrj.Op Ar service-name 43242be47eSzrj.Ar module-type 44242be47eSzrj.Ar control-flag 45242be47eSzrj.Pa pam_guest 46242be47eSzrj.Op Ar arguments 47242be47eSzrj.Sh DESCRIPTION 48242be47eSzrjThe guest service module for PAM allows guest logins. 49242be47eSzrjIf successful, the 50242be47eSzrj.Nm 51242be47eSzrjmodule sets the PAM environment variable 52242be47eSzrj.Ev GUEST 53242be47eSzrjto the login name. 54242be47eSzrjThe application can check this variable using 55242be47eSzrj.Xr pam_getenv 3 56242be47eSzrjto differentiate guest logins from normal logins. 57242be47eSzrj.Pp 58242be47eSzrjThe following options may be passed to the 59242be47eSzrj.Nm 60242be47eSzrjmodule: 61242be47eSzrj.Bl -tag -width ".Cm pass_as_ruser" 62242be47eSzrj.It Cm guests Ns = Ns Ar list 63242be47eSzrjComma-separated list of guest account names. 64242be47eSzrjThe default is 65242be47eSzrj.Dq Li guest . 66242be47eSzrjA typical value for 67242be47eSzrj.Xr ftpd 8 68242be47eSzrjwould be 69242be47eSzrj.Dq Li anonymous,ftp . 70242be47eSzrj.It Cm nopass 71242be47eSzrjOmits the password prompt if the target account is on the list of 72242be47eSzrjguest accounts. 73242be47eSzrj.It Cm pass_as_ruser 74242be47eSzrjThe password typed in by the user is exported as the 75242be47eSzrj.Dv PAM_RUSER 76242be47eSzrjitem. 77242be47eSzrjThis is useful for applications like 78242be47eSzrj.Xr ftpd 8 79242be47eSzrjwhere guest users are encouraged to use their email address as 80242be47eSzrjpassword. 81242be47eSzrj.It Cm pass_is_user 82242be47eSzrjRequires the guest user to type in the guest account name as password. 83242be47eSzrj.El 84242be47eSzrj.Sh SEE ALSO 85dfc0c85aSSascha Wildner.Xr pam 3 , 86242be47eSzrj.Xr pam_getenv 3 , 87242be47eSzrj.Xr pam_get_item 3 , 88dfc0c85aSSascha Wildner.Xr pam.conf 5 89242be47eSzrj.Sh AUTHORS 90242be47eSzrjThe 91242be47eSzrj.Nm 92242be47eSzrjmodule and this manual page were developed for the 93242be47eSzrj.Fx 94242be47eSzrjProject by 95242be47eSzrjThinkSec AS and NAI Labs, the Security Research Division of Network 96242be47eSzrjAssociates, Inc.\& under DARPA/SPAWAR contract N66001-01-C-8035 97242be47eSzrj.Pq Dq CBOSS , 98242be47eSzrjas part of the DARPA CHATS research program. 99