Hello community, here is the log from the commit of package pam checked in at Thu Oct 11 22:08:37 CEST 2007. -------- --- pam/pam.changes 2007-07-18 12:00:29.000000000 +0200 +++ /mounts/work_src_done/STABLE/pam/pam.changes 2007-10-10 15:14:06.000000000 +0200 @@ -1,0 +2,9 @@ +Wed Oct 10 15:13:33 CEST 2007 - kukuk@suse.de + +- Update to version 0.99.9.0: + - misc_conv no longer blocks SIGINT; applications that don't want + user-interruptable prompts should block SIGINT themselves + - Merge fixes from Debian + - Fix parser for pam_group and pam_time + +------------------------------------------------------------------- Old: ---- Linux-PAM-0.99.8.1-docs.tar.bz2 Linux-PAM-0.99.8.1.tar.bz2 New: ---- Linux-PAM-0.99.9.0-docs.tar.bz2 Linux-PAM-0.99.9.0.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pam.spec ++++++ --- /var/tmp/diff_new_pack.iO6780/_old 2007-10-11 22:07:11.000000000 +0200 +++ /var/tmp/diff_new_pack.iO6780/_new 2007-10-11 22:07:11.000000000 +0200 @@ -1,5 +1,5 @@ # -# spec file for package pam (Version 0.99.8.1) +# spec file for package pam (Version 0.99.9.0) # # Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine @@ -11,20 +11,20 @@ # norootforbuild Name: pam -URL: http://www.kernel.org/pub/linux/libs/pam/ +Url: http://www.kernel.org/pub/linux/libs/pam/ BuildRequires: bison cracklib-devel db-devel flex libxcrypt-devel %if %{suse_version} > 1000 BuildRequires: audit-devel %endif -%define libpam_so_version 0.81.8 -%define libpam_misc_so_version 0.81.2 +%define libpam_so_version 0.81.9 +%define libpam_misc_so_version 0.81.3 %define libpamc_so_version 0.81.0 -License: Beerware, Cardware, Shareware (not restricted), BSD 3-Clause, THE BEER-WARE LICENSE" (Revision 42) +License: BSD 3-Clause; GPL v2 or later Group: System/Libraries -Autoreqprov: on -Version: 0.99.8.1 +AutoReqProv: on +Version: 0.99.9.0 Release: 1 -Summary: A security tool that provides authentication for applications +Summary: A Security Tool that Provides Authentication for Applications Obsoletes: pam-laus Source: Linux-PAM-%{version}.tar.bz2 Source1: Linux-PAM-%{version}-docs.tar.bz2 @@ -61,7 +61,7 @@ Summary: Include Files and Libraries for PAM-Development Group: Development/Libraries/C and C++ Requires: pam = %{version} glibc-devel -Autoreqprov: on +AutoReqProv: on %description devel PAM (Pluggable Authentication Modules) is a system security tool which @@ -93,11 +93,11 @@ make check %install -install -d -m 755 $RPM_BUILD_ROOT/etc/pam.d +mkdir -p $RPM_BUILD_ROOT/etc/pam.d mkdir -p $RPM_BUILD_ROOT/usr/include/security mkdir -p $RPM_BUILD_ROOT/%{_lib}/security mkdir -p $RPM_BUILD_ROOT/sbin -install -d -m 755 $RPM_BUILD_ROOT%{_libdir} +mkdir -p -m 755 $RPM_BUILD_ROOT%{_libdir} make DESTDIR=$RPM_BUILD_ROOT install /sbin/ldconfig -n $RPM_BUILD_ROOT/%{_lib} # Install documentation @@ -164,7 +164,6 @@ %postun %run_ldconfig - %verifyscript %verify_permissions -e /sbin/unix_chkpwd @@ -266,8 +265,13 @@ %{_libdir}/libpam.so %{_libdir}/libpamc.so %{_libdir}/libpam_misc.so - %changelog +* Wed Oct 10 2007 - kukuk@suse.de +- Update to version 0.99.9.0: + - misc_conv no longer blocks SIGINT; applications that don't want + user-interruptable prompts should block SIGINT themselves + - Merge fixes from Debian + - Fix parser for pam_group and pam_time * Wed Jul 18 2007 - kukuk@suse.de - Update to version 0.99.8.1: - Fix regression in pam_audit ++++++ Linux-PAM-0.99.8.1-docs.tar.bz2 -> Linux-PAM-0.99.9.0-docs.tar.bz2 ++++++ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-author.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-author.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-author.html 2007-07-10 12:02:34.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-author.html 2007-10-01 12:17:44.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�11.�Author/acknowledgments</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-see-also.html" title="Chapter�10.�See also"><link rel="next" href="adg-copyright.html" title="Chapter�12.�Copyright information for this document"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�11.�Author/acknowledgments</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-see-also.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-copyright.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-author"></a>Chapter�11.�Author/acknowledgments</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�11.�Author/acknowledgments</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-see-also.html" title="Chapter�10.�See also"><link rel="next" href="adg-copyright.html" title="Chapter�12.�Copyright information for this document"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�11.�Author/acknowledgments</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-see-also.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-copyright.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-author"></a>Chapter�11.�Author/acknowledgments</h2></div></div></div><p> This document was written by Andrew G. Morgan (morgan@kernel.org) with many contributions from Chris Adams, Peter Allgeyer, Tim Baverstock, Tim Berger, Craig S. Bell, diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-copyright.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-copyright.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-copyright.html 2007-07-10 12:02:34.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-copyright.html 2007-10-01 12:17:44.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�12.�Copyright information for this document</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-author.html" title="Chapter�11.�Author/acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�12.�Copyright information for this document</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-author.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�</td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-copyright"></a>Chapter�12.�Copyright information for this document</h2></div></div></div><pre class="programlisting"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�12.�Copyright information for this document</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-author.html" title="Chapter�11.�Author/acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�12.�Copyright information for this document</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-author.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�</td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-copyright"></a>Chapter�12.�Copyright information for this document</h2></div></div></div><pre class="programlisting"> Copyright (c) 2006 Thorsten Kukuk <kukuk@thkukuk.de> Copyright (c) 1996-2002 Andrew G. Morgan <morgan@kernel.org> </pre><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-example.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-example.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-example.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-example.html 2007-10-01 12:17:44.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�8.�An example application</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-glossary.html" title="Chapter�7.�Glossary of PAM related terms"><link rel="next" href="adg-files.html" title="Chapter�9.�Files"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�8.�An example application</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-glossary.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-files.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-example"></a>Chapter�8.�An example application</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�8.�An example application</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-glossary.html" title="Chapter�7.�Glossary of PAM related terms"><link rel="next" href="adg-files.html" title="Chapter�9.�Files"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�8.�An example application</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-glossary.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-files.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-example"></a>Chapter�8.�An example application</h2></div></div></div><p> To get a flavor of the way a <span class="emphasis"><em>Linux-PAM</em></span> application is written we include the following example. It prompts the user for their password and indicates whether their account diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-files.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-files.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-files.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-files.html 2007-10-01 12:17:44.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�9.�Files</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-example.html" title="Chapter�8.�An example application"><link rel="next" href="adg-see-also.html" title="Chapter�10.�See also"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�9.�Files</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-example.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-see-also.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-files"></a>Chapter�9.�Files</h2></div></div></div><div class="variablelist"><dl><dt><span class="term"><code class="filename">/usr/include/security/pam_appl.h</code></span></dt><dd><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�9.�Files</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-example.html" title="Chapter�8.�An example application"><link rel="next" href="adg-see-also.html" title="Chapter�10.�See also"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�9.�Files</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-example.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-see-also.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-files"></a>Chapter�9.�Files</h2></div></div></div><div class="variablelist"><dl><dt><span class="term"><code class="filename">/usr/include/security/pam_appl.h</code></span></dt><dd><p> Header file with interfaces for <span class="emphasis"><em>Linux-PAM</em></span> applications. </p></dd><dt><span class="term"><code class="filename">/usr/include/security/pam_misc.h</code></span></dt><dd><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-glossary.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-glossary.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-glossary.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-glossary.html 2007-10-01 12:17:44.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�7.�Glossary of PAM related terms</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-porting.html" title="Chapter�6.�Porting legacy applications"><link rel="next" href="adg-example.html" title="Chapter�8.�An example application"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�7.�Glossary of PAM related terms</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-porting.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-example.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-glossary"></a>Chapter�7.�Glossary of PAM related terms</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�7.�Glossary of PAM related terms</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-porting.html" title="Chapter�6.�Porting legacy applications"><link rel="next" href="adg-example.html" title="Chapter�8.�An example application"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�7.�Glossary of PAM related terms</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-porting.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-example.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-glossary"></a>Chapter�7.�Glossary of PAM related terms</h2></div></div></div><p> The following are a list of terms used within this document. </p><div class="variablelist"><dl><dt><span class="term">Authentication token</span></dt><dd><p> Generally, this is a password. However, a user can authenticate diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-interface-by-app-expected.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-interface-by-app-expected.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-interface-by-app-expected.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-interface-by-app-expected.html 2007-10-01 12:17:43.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.1.�What can be expected by the application</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-interface.html" title="Chapter�3.� The public interface to Linux-PAM"><link rel="prev" href="adg-interface.html" title="Chapter�3.� The public interface to Linux-PAM"><link rel="next" href="adg-interface-of-app-expected.html" title="3.2.�What is expected of an application"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.1.�What can be expected by the application</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-interface.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.� +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.1.�What can be expected by the application</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-interface.html" title="Chapter�3.� The public interface to Linux-PAM"><link rel="prev" href="adg-interface.html" title="Chapter�3.� The public interface to Linux-PAM"><link rel="next" href="adg-interface-of-app-expected.html" title="3.2.�What is expected of an application"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.1.�What can be expected by the application</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-interface.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.� The public interface to <span class="emphasis"><em>Linux-PAM</em></span> </th><td width="20%" align="right">�<a accesskey="n" href="adg-interface-of-app-expected.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-interface-by-app-expected"></a>3.1.�What can be expected by the application</h2></div></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="adg-pam_start"></a>3.1.1.�Initialization of PAM transaction</h3></div></div></div><div class="funcsynopsis"><pre class="funcsynopsisinfo">#include <security/pam_appl.h></pre><table border="0" summary="Function synopsis" cellspacing="0" cellpadding="0" style="padding-bottom: 1em"><tr><td><code class="funcdef">int <b class="fsfunc">pam_start</b>(</code></td><td><var class="pdparam">service_name</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">user</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">pam_conversation</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">pamh</var><code>)</code>;</td><td>�</td></tr></table><table border="0" summary="Function argument synopsis" cellspacing="0" cellpadding="0"><tr><td><code>const char *</code>�</td><td><code><var class="pdparam">service_name</var>;</code></td></tr><tr><td><code>const char *</code>�</td><td><code><var class="pdparam">user</var>;</code></td></tr><tr><td><code>const struct pam_conv *</code>�</td><td><code><var class="pdparam">pam_conversation</var>;</code></td></tr><tr><td><code>pam_handle_t **</code>�</td><td><code><var class="pdparam">pamh</var>;</code></td></tr></table></div><div class="section" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="adg-pam_start-description"></a>3.1.1.1.�DESCRIPTION</h4></div></div></div><p> The <code class="function">pam_start</code> function creates the PAM context @@ -51,7 +51,7 @@ </p></dd></dl></div></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="adg-pam_end"></a>3.1.2.�Termination of PAM transaction</h3></div></div></div><div class="funcsynopsis"><pre class="funcsynopsisinfo">#include <security/pam_appl.h></pre><table border="0" summary="Function synopsis" cellspacing="0" cellpadding="0" style="padding-bottom: 1em"><tr><td><code class="funcdef">int <b class="fsfunc">pam_end</b>(</code></td><td><var class="pdparam">pamh</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">pam_status</var><code>)</code>;</td><td>�</td></tr></table><table border="0" summary="Function argument synopsis" cellspacing="0" cellpadding="0"><tr><td><code>pam_handle_t *</code>�</td><td><code><var class="pdparam">pamh</var>;</code></td></tr><tr><td><code>int </code>�</td><td><code><var class="pdparam">pam_status</var>;</code></td></tr></table></div><div class="section" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="adg-pam_end-description"></a>3.1.2.1.�DESCRIPTION</h4></div></div></div><p> The <code class="function">pam_end</code> function terminates the PAM transaction and is the last function an application should call - in the PAM contenxt. Upon return the handle <span class="emphasis"><em>pamh</em></span> + in the PAM context. Upon return the handle <span class="emphasis"><em>pamh</em></span> is no longer valid and all memory associated with it will be invalid. </p><p> @@ -548,9 +548,14 @@ listed separately to indicate that this is the correct way to achieve such a setting. </p></dd><dt><span class="term">NAME</span></dt><dd><p> - Without an '=' the pam_putenv() function will delete the + Without an '=' the <code class="function">pam_putenv</code>() function + will delete the corresponding variable from the PAM environment. - </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="adg-pam_putenv-return_values"></a>3.1.13.2.�RETURN VALUES</h4></div></div></div><div class="variablelist"><dl><dt><span class="term">PAM_PERM_DENIED</span></dt><dd><p> + </p></dd></dl></div><p> + <code class="function">pam_putenv</code>() operates on a copy of + <span class="emphasis"><em>name_value</em></span>, which means in contrast to + <span class="citerefentry"><span class="refentrytitle">putenv</span>(3)</span>, the application is responsible to free the data. + </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="adg-pam_putenv-return_values"></a>3.1.13.2.�RETURN VALUES</h4></div></div></div><div class="variablelist"><dl><dt><span class="term">PAM_PERM_DENIED</span></dt><dd><p> Argument <span class="emphasis"><em>name_value</em></span> given is a NULL pointer. </p></dd><dt><span class="term">PAM_BAD_ITEM</span></dt><dd><p> Variable requested (for deletion) is not currently set. diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-interface.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-interface.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-interface.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-interface.html 2007-10-01 12:17:43.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�3.� The public interface to Linux-PAM</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-overview.html" title="Chapter�2.�Overview"><link rel="next" href="adg-interface-by-app-expected.html" title="3.1.�What can be expected by the application"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�3.� +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�3.� The public interface to Linux-PAM</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-overview.html" title="Chapter�2.�Overview"><link rel="next" href="adg-interface-by-app-expected.html" title="3.1.�What can be expected by the application"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�3.� The public interface to <span class="emphasis"><em>Linux-PAM</em></span> </th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-overview.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-interface-by-app-expected.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-interface"></a>Chapter�3.� The public interface to <span class="emphasis"><em>Linux-PAM</em></span> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-interface-of-app-expected.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-interface-of-app-expected.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-interface-of-app-expected.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-interface-of-app-expected.html 2007-10-01 12:17:43.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.2.�What is expected of an application</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-interface.html" title="Chapter�3.� The public interface to Linux-PAM"><link rel="prev" href="adg-interface-by-app-expected.html" title="3.1.�What can be expected by the application"><link rel="next" href="adg-interface-programming-notes.html" title="3.3.�Programming notes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.2.�What is expected of an application</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-interface-by-app-expected.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.� +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.2.�What is expected of an application</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-interface.html" title="Chapter�3.� The public interface to Linux-PAM"><link rel="prev" href="adg-interface-by-app-expected.html" title="3.1.�What can be expected by the application"><link rel="next" href="adg-interface-programming-notes.html" title="3.3.�Programming notes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.2.�What is expected of an application</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-interface-by-app-expected.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.� The public interface to <span class="emphasis"><em>Linux-PAM</em></span> </th><td width="20%" align="right">�<a accesskey="n" href="adg-interface-programming-notes.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-interface-of-app-expected"></a>3.2.�What is expected of an application</h2></div></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="adg-pam_conv"></a>3.2.1.�The conversation function</h3></div></div></div><div class="funcsynopsis"><pre class="funcsynopsisinfo">#include <security/pam_appl.h></pre></div><pre class="programlisting"> struct pam_message { diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-interface-programming-notes.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-interface-programming-notes.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-interface-programming-notes.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-interface-programming-notes.html 2007-10-01 12:17:43.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.3.�Programming notes</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-interface.html" title="Chapter�3.� The public interface to Linux-PAM"><link rel="prev" href="adg-interface-of-app-expected.html" title="3.2.�What is expected of an application"><link rel="next" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.3.�Programming notes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-interface-of-app-expected.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.� +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.3.�Programming notes</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-interface.html" title="Chapter�3.� The public interface to Linux-PAM"><link rel="prev" href="adg-interface-of-app-expected.html" title="3.2.�What is expected of an application"><link rel="next" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.3.�Programming notes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-interface-of-app-expected.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.� The public interface to <span class="emphasis"><em>Linux-PAM</em></span> </th><td width="20%" align="right">�<a accesskey="n" href="adg-security.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-interface-programming-notes"></a>3.3.�Programming notes</h2></div></div></div><p> Note, all of the authentication service function calls accept the diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-introduction-description.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-introduction-description.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-introduction-description.html 2007-07-10 12:02:32.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-introduction-description.html 2007-10-01 12:17:42.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>1.1.�Description</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-introduction.html" title="Chapter�1.�Introduction"><link rel="prev" href="adg-introduction.html" title="Chapter�1.�Introduction"><link rel="next" href="adg-introduction-synopsis.html" title="1.2.�Synopsis"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">1.1.�Description</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-introduction.html">Prev</a>�</td><th width="60%" align="center">Chapter�1.�Introduction</th><td width="20%" align="right">�<a accesskey="n" href="adg-introduction-synopsis.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-introduction-description"></a>1.1.�Description</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>1.1.�Description</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-introduction.html" title="Chapter�1.�Introduction"><link rel="prev" href="adg-introduction.html" title="Chapter�1.�Introduction"><link rel="next" href="adg-introduction-synopsis.html" title="1.2.�Synopsis"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">1.1.�Description</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-introduction.html">Prev</a>�</td><th width="60%" align="center">Chapter�1.�Introduction</th><td width="20%" align="right">�<a accesskey="n" href="adg-introduction-synopsis.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-introduction-description"></a>1.1.�Description</h2></div></div></div><p> <span class="emphasis"><em>Linux-PAM</em></span> (Pluggable Authentication Modules for Linux) is a library that enables the local system administrator to choose how individual applications diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-introduction.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-introduction.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-introduction.html 2007-07-10 12:02:32.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-introduction.html 2007-10-01 12:17:42.000000000 +0200 @@ -1 +1 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�1.�Introduction</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="next" href="adg-introduction-description.html" title="1.1.�Description"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�1.�Introduction</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Linux-PAM_ADG.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-introduction-description.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-introduction"></a>Chapter�1.�Introduction</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="adg-introduction-description.html">1.1. Description</a></span></dt><dt><span class="section"><a href="adg-introduction-synopsis.html">1.2. Synopsis</a></span></dt></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Linux-PAM_ADG.html">Prev</a>�</td><td width="20%" align="center">�</td><td width="40%" align="right">�<a accesskey="n" href="adg-introduction-description.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">The Linux-PAM Application Developers' Guide�</td><td width="20%" align="center"><a accesskey="h" href="Linux-PAM_ADG.html">Home</a></td><td width="40%" align="right" valign="top">�1.1.�Description</td></tr></table></div></body></html> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�1.�Introduction</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="next" href="adg-introduction-description.html" title="1.1.�Description"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�1.�Introduction</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Linux-PAM_ADG.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-introduction-description.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-introduction"></a>Chapter�1.�Introduction</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="adg-introduction-description.html">1.1. Description</a></span></dt><dt><span class="section"><a href="adg-introduction-synopsis.html">1.2. Synopsis</a></span></dt></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Linux-PAM_ADG.html">Prev</a>�</td><td width="20%" align="center">�</td><td width="40%" align="right">�<a accesskey="n" href="adg-introduction-description.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">The Linux-PAM Application Developers' Guide�</td><td width="20%" align="center"><a accesskey="h" href="Linux-PAM_ADG.html">Home</a></td><td width="40%" align="right" valign="top">�1.1.�Description</td></tr></table></div></body></html> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-introduction-synopsis.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-introduction-synopsis.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-introduction-synopsis.html 2007-07-10 12:02:32.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-introduction-synopsis.html 2007-10-01 12:17:42.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>1.2.�Synopsis</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-introduction.html" title="Chapter�1.�Introduction"><link rel="prev" href="adg-introduction-description.html" title="1.1.�Description"><link rel="next" href="adg-overview.html" title="Chapter�2.�Overview"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">1.2.�Synopsis</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-introduction-description.html">Prev</a>�</td><th width="60%" align="center">Chapter�1.�Introduction</th><td width="20%" align="right">�<a accesskey="n" href="adg-overview.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-introduction-synopsis"></a>1.2.�Synopsis</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>1.2.�Synopsis</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-introduction.html" title="Chapter�1.�Introduction"><link rel="prev" href="adg-introduction-description.html" title="1.1.�Description"><link rel="next" href="adg-overview.html" title="Chapter�2.�Overview"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">1.2.�Synopsis</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-introduction-description.html">Prev</a>�</td><th width="60%" align="center">Chapter�1.�Introduction</th><td width="20%" align="right">�<a accesskey="n" href="adg-overview.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-introduction-synopsis"></a>1.2.�Synopsis</h2></div></div></div><p> For general applications that wish to use the services provided by <span class="emphasis"><em>Linux-PAM</em></span> the following is a summary of the relevant linking information: @@ -8,7 +8,7 @@ cc -o application .... -lpam </pre><p> </p><p> - In addition to <span><strong class="command">libpam</strong></span>, there is a library of + In addition to <span class="command"><strong>libpam</strong></span>, there is a library of miscellaneous functions that make the job of writing <span class="emphasis"><em>PAM-aware</em></span> applications easier (this library is not covered in the DCE-RFC for PAM and is specific to the Linux-PAM diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-libpam-functions.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-libpam-functions.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-libpam-functions.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-libpam-functions.html 2007-10-01 12:17:44.000000000 +0200 @@ -1,7 +1,7 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5.1.�Functions supplied</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-libpam_misc.html" title="Chapter�5.�A library of miscellaneous helper functions"><link rel="prev" href="adg-libpam_misc.html" title="Chapter�5.�A library of miscellaneous helper functions"><link rel="next" href="adg-porting.html" title="Chapter�6.�Porting legacy applications"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5.1.�Functions supplied</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-libpam_misc.html">Prev</a>�</td><th width="60%" align="center">Chapter�5.�A library of miscellaneous helper functions</th><td width="20%" align="right">�<a accesskey="n" href="adg-porting.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-libpam-functions"></a>5.1.�Functions supplied</h2></div></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="adg-misc_conv"></a>5.1.1.�Text based conversation function</h3></div></div></div><div class="funcsynopsis"><pre class="funcsynopsisinfo">#include <security/pam_misc.h></pre><table border="0" summary="Function synopsis" cellspacing="0" cellpadding="0" style="padding-bottom: 1em"><tr><td><code class="funcdef">void <b class="fsfunc">misc_conv</b>(</code></td><td><var class="pdparam">num_msg</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">msgm</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">response</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">appdata_ptr</var><code>)</code>;</td><td>�</td></tr></table><table border="0" summary="Function argument synopsis" cellspacing="0" cellpadding="0"><tr><td><code>int </code>�</td><td><code><var class="pdparam">num_msg</var>;</code></td></tr><tr><td><code>const struct pam_message **</code>�</td><td><code><var class="pdparam">msgm</var>;</code></td></tr><tr><td><code>struct pam_response **</code>�</td><td><code><var class="pdparam">response</var>;</code></td></tr><tr><td><code>void *</code>�</td><td><code><var class="pdparam">appdata_ptr</var>;</code></td></tr></table></div><div class="section" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="adg-misc_conv-description"></a>5.1.1.1.�DESCRIPTION</h4></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5.1.�Functions supplied</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-libpam_misc.html" title="Chapter�5.�A library of miscellaneous helper functions"><link rel="prev" href="adg-libpam_misc.html" title="Chapter�5.�A library of miscellaneous helper functions"><link rel="next" href="adg-porting.html" title="Chapter�6.�Porting legacy applications"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5.1.�Functions supplied</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-libpam_misc.html">Prev</a>�</td><th width="60%" align="center">Chapter�5.�A library of miscellaneous helper functions</th><td width="20%" align="right">�<a accesskey="n" href="adg-porting.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-libpam-functions"></a>5.1.�Functions supplied</h2></div></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="adg-misc_conv"></a>5.1.1.�Text based conversation function</h3></div></div></div><div class="funcsynopsis"><pre class="funcsynopsisinfo">#include <security/pam_misc.h></pre><table border="0" summary="Function synopsis" cellspacing="0" cellpadding="0" style="padding-bottom: 1em"><tr><td><code class="funcdef">void <b class="fsfunc">misc_conv</b>(</code></td><td><var class="pdparam">num_msg</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">msgm</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">response</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">appdata_ptr</var><code>)</code>;</td><td>�</td></tr></table><table border="0" summary="Function argument synopsis" cellspacing="0" cellpadding="0"><tr><td><code>int </code>�</td><td><code><var class="pdparam">num_msg</var>;</code></td></tr><tr><td><code>const struct pam_message **</code>�</td><td><code><var class="pdparam">msgm</var>;</code></td></tr><tr><td><code>struct pam_response **</code>�</td><td><code><var class="pdparam">response</var>;</code></td></tr><tr><td><code>void *</code>�</td><td><code><var class="pdparam">appdata_ptr</var>;</code></td></tr></table></div><div class="section" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="adg-misc_conv-description"></a>5.1.1.1.�DESCRIPTION</h4></div></div></div><p> The <code class="function">misc_conv</code> function is part of - <span><strong class="command">libpam_misc</strong></span> and not of the standard - <span><strong class="command">libpam</strong></span> library. This function will prompt + <span class="command"><strong>libpam_misc</strong></span> and not of the standard + <span class="command"><strong>libpam</strong></span> library. This function will prompt the user with the appropriate comments and obtain the appropriate inputs as directed by authentication modules. </p><p> @@ -52,7 +52,7 @@ </p></dd></dl></div><p> The following two function pointers are available for supporting binary prompts in the conversation function. They are optimized - for the current incarnation of the <span><strong class="command">libpamc</strong></span> + for the current incarnation of the <span class="command"><strong>libpamc</strong></span> library and are subject to change. </p><div class="variablelist"><dl><dt><span class="term"> <span class="type">int</span> <code class="varname">(*pam_binary_handler_fn)</code>(<span class="type">void *</span><code class="varname">appdata</code>, <span class="type">pamc_bp_t *</span><code class="varname">prompt_p</code>); diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-libpam_misc.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-libpam_misc.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-libpam_misc.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-libpam_misc.html 2007-10-01 12:17:44.000000000 +0200 @@ -1,7 +1,7 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�5.�A library of miscellaneous helper functions</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-security-resources.html" title="4.5.�Sufficient resources"><link rel="next" href="adg-libpam-functions.html" title="5.1.�Functions supplied"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�5.�A library of miscellaneous helper functions</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-security-resources.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-libpam-functions.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-libpam_misc"></a>Chapter�5.�A library of miscellaneous helper functions</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="adg-libpam-functions.html">5.1. Functions supplied</a></span></dt><dd><dl><dt><span class="section"><a href="adg-libpam-functions.html#adg-misc_conv">5.1.1. Text based conversation function</a></span></dt><dt><span class="section"><a href="adg-libpam-functions.html#adg-pam_misc_paste_env">5.1.2. Transcribing an environment to that of PAM</a></span></dt><dt><span class="section"><a href="adg-libpam-functions.html#adg-pam_misc_drop_env">5.1.3. Liberating a locally saved environment</a></span></dt><dt><span class="section"><a href="adg-libpam-functions.html#adg-pam_misc_setenv">5.1.4. BSD like PAM environment variable setting</a></span></dt></dl></dd></dl></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�5.�A library of miscellaneous helper functions</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-security-resources.html" title="4.5.�Sufficient resources"><link rel="next" href="adg-libpam-functions.html" title="5.1.�Functions supplied"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�5.�A library of miscellaneous helper functions</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-security-resources.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-libpam-functions.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-libpam_misc"></a>Chapter�5.�A library of miscellaneous helper functions</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="adg-libpam-functions.html">5.1. Functions supplied</a></span></dt><dd><dl><dt><span class="section"><a href="adg-libpam-functions.html#adg-misc_conv">5.1.1. Text based conversation function</a></span></dt><dt><span class="section"><a href="adg-libpam-functions.html#adg-pam_misc_paste_env">5.1.2. Transcribing an environment to that of PAM</a></span></dt><dt><span class="section"><a href="adg-libpam-functions.html#adg-pam_misc_drop_env">5.1.3. Liberating a locally saved environment</a></span></dt><dt><span class="section"><a href="adg-libpam-functions.html#adg-pam_misc_setenv">5.1.4. BSD like PAM environment variable setting</a></span></dt></dl></dd></dl></div><p> To aid the work of the application developer a library of miscellaneous functions is provided. It is called - <span><strong class="command">libpam_miscy</strong></span>, and contains a text based + <span class="command"><strong>libpam_miscy</strong></span>, and contains a text based conversation function, and routines for enhancing the standard PAM-environment variable support. </p><p> @@ -10,6 +10,6 @@ <code class="function"><security/pam_misc.h></code>. It should be noted that this library is specific to <span class="emphasis"><em>Linux-PAM</em></span> and is not referred to in - the defining DCE-RFC (see <a href="adg-see-also.html" title="Chapter�10.�See also">See also</a>) + the defining DCE-RFC (see <a class="link" href="adg-see-also.html" title="Chapter�10.�See also">See also</a>) below. </p></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="adg-security-resources.html">Prev</a>�</td><td width="20%" align="center">�</td><td width="40%" align="right">�<a accesskey="n" href="adg-libpam-functions.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">4.5.�Sufficient resources�</td><td width="20%" align="center"><a accesskey="h" href="Linux-PAM_ADG.html">Home</a></td><td width="40%" align="right" valign="top">�5.1.�Functions supplied</td></tr></table></div></body></html> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-overview.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-overview.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-overview.html 2007-07-10 12:02:32.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-overview.html 2007-10-01 12:17:42.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�2.�Overview</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-introduction-synopsis.html" title="1.2.�Synopsis"><link rel="next" href="adg-interface.html" title="Chapter�3.� The public interface to Linux-PAM"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�2.�Overview</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-introduction-synopsis.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-interface.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-overview"></a>Chapter�2.�Overview</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�2.�Overview</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-introduction-synopsis.html" title="1.2.�Synopsis"><link rel="next" href="adg-interface.html" title="Chapter�3.� The public interface to Linux-PAM"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�2.�Overview</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-introduction-synopsis.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-interface.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-overview"></a>Chapter�2.�Overview</h2></div></div></div><p> Most service-giving applications are restricted. In other words, their service is not available to all and every prospective client. Instead, the applying client must jump through a number of hoops to @@ -30,14 +30,14 @@ </p><p> The PAM library, however, must work equally well for different styles of application. Some applications, like the familiar - <span><strong class="command">login</strong></span> and <span><strong class="command">passwd</strong></span> are terminal + <span class="command"><strong>login</strong></span> and <span class="command"><strong>passwd</strong></span> are terminal based applications, exchanges of information with the client in these cases is as plain text messages. Graphically based applications, however, have a more sophisticated interface. They generally interact with the user via specially constructed dialogue boxes. Additionally, network based services require that text messages exchanged with the client are specially formatted for automated processing: one such - example is <span><strong class="command">ftpd</strong></span> which prefixes each exchanged + example is <span class="command"><strong>ftpd</strong></span> which prefixes each exchanged message with a numeric identifier. </p><p> The presentation of simple requests to a client is thus something very @@ -57,8 +57,8 @@ For example, the conversation function may be called by the PAM library with a request to prompt the user for a password. Its job is to reformat the prompt request into a form that the client will - understand. In the case of <span><strong class="command">ftpd</strong></span>, this might involve - prefixing the string with the number <span><strong class="command">331</strong></span> and sending + understand. In the case of <span class="command"><strong>ftpd</strong></span>, this might involve + prefixing the string with the number <span class="command"><strong>331</strong></span> and sending the request over the network to a connected client. The conversation function will then obtain any reply and, after extracting the typed password, will return this string of text to the PAM library. Similar @@ -87,7 +87,7 @@ whether the user's authentication token has expired - in such a case the application may choose to attempt to update it with a call to <code class="function">pam_chauthtok()</code>, although some applications - are not suited to this task (<span><strong class="command">ftp</strong></span> for example) + are not suited to this task (<span class="command"><strong>ftp</strong></span> for example) and in this case the application should deny access to the user. </p><p> PAM is also capable of setting and deleting the users credentials with diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-porting.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-porting.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-porting.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-porting.html 2007-10-01 12:17:44.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�6.�Porting legacy applications</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-libpam-functions.html" title="5.1.�Functions supplied"><link rel="next" href="adg-glossary.html" title="Chapter�7.�Glossary of PAM related terms"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�6.�Porting legacy applications</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-libpam-functions.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-glossary.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-porting"></a>Chapter�6.�Porting legacy applications</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�6.�Porting legacy applications</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-libpam-functions.html" title="5.1.�Functions supplied"><link rel="next" href="adg-glossary.html" title="Chapter�7.�Glossary of PAM related terms"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�6.�Porting legacy applications</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-libpam-functions.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-glossary.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-porting"></a>Chapter�6.�Porting legacy applications</h2></div></div></div><p> The point of PAM is that the application is not supposed to have any idea how the attached authentication modules will choose to authenticate the user. So all they can do is provide a conversation @@ -22,8 +22,8 @@ once in this way any new protocols can be implemented in-situ. </p><p> One simple test of a ported application would be to insert the - <span><strong class="command">pam_permit</strong></span> module and see if the application - demands you type a password... In such a case, <span><strong class="command">xlock</strong></span> + <span class="command"><strong>pam_permit</strong></span> module and see if the application + demands you type a password... In such a case, <span class="command"><strong>xlock</strong></span> would fail to lock the terminal - or would at best be a screen-saver, ftp would give password free access to all etc.. Neither of these is a very secure thing to do, but they do illustrate how diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-security-conv-function.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-security-conv-function.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-security-conv-function.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-security-conv-function.html 2007-10-01 12:17:43.000000000 +0200 @@ -1,8 +1,8 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.3.�The conversation function</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"><link rel="prev" href="adg-security-service-name.html" title="4.2.�Choice of a service name"><link rel="next" href="adg-security-usre-identity.html" title="4.4.�The identity of the user"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.3.�The conversation function</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-security-service-name.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.� +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.3.�The conversation function</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"><link rel="prev" href="adg-security-service-name.html" title="4.2.�Choice of a service name"><link rel="next" href="adg-security-usre-identity.html" title="4.4.�The identity of the user"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.3.�The conversation function</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-security-service-name.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.� Security issues of <span class="emphasis"><em>Linux-PAM</em></span> </th><td width="20%" align="right">�<a accesskey="n" href="adg-security-usre-identity.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-security-conv-function"></a>4.3.�The conversation function</h2></div></div></div><p> Care should be taken to ensure that the <code class="function">conv()</code> function is robust. Such a function is provided in the library - <span><strong class="command">libpam_misc</strong></span> (see - <a href="adg-libpam-functions.html" title="5.1.�Functions supplied">below</a>). + <span class="command"><strong>libpam_misc</strong></span> (see + <a class="link" href="adg-libpam-functions.html" title="5.1.�Functions supplied">below</a>). </p></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="adg-security-service-name.html">Prev</a>�</td><td width="20%" align="center"><a accesskey="u" href="adg-security.html">Up</a></td><td width="40%" align="right">�<a accesskey="n" href="adg-security-usre-identity.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">4.2.�Choice of a service name�</td><td width="20%" align="center"><a accesskey="h" href="Linux-PAM_ADG.html">Home</a></td><td width="40%" align="right" valign="top">�4.4.�The identity of the user</td></tr></table></div></body></html> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-security.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-security.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-security.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-security.html 2007-10-01 12:17:43.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�4.� Security issues of Linux-PAM</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-interface-programming-notes.html" title="3.3.�Programming notes"><link rel="next" href="adg-security-library-calls.html" title="4.1.�Care about standard library calls"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�4.� +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�4.� Security issues of Linux-PAM</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-interface-programming-notes.html" title="3.3.�Programming notes"><link rel="next" href="adg-security-library-calls.html" title="4.1.�Care about standard library calls"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�4.� Security issues of <span class="emphasis"><em>Linux-PAM</em></span> </th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-interface-programming-notes.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-security-library-calls.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-security"></a>Chapter�4.� Security issues of <span class="emphasis"><em>Linux-PAM</em></span> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-security-library-calls.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-security-library-calls.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-security-library-calls.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-security-library-calls.html 2007-10-01 12:17:43.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.1.�Care about standard library calls</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"><link rel="prev" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"><link rel="next" href="adg-security-service-name.html" title="4.2.�Choice of a service name"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.1.�Care about standard library calls</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-security.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.� +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.1.�Care about standard library calls</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"><link rel="prev" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"><link rel="next" href="adg-security-service-name.html" title="4.2.�Choice of a service name"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.1.�Care about standard library calls</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-security.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.� Security issues of <span class="emphasis"><em>Linux-PAM</em></span> </th><td width="20%" align="right">�<a accesskey="n" href="adg-security-service-name.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-security-library-calls"></a>4.1.�Care about standard library calls</h2></div></div></div><p> In general, writers of authorization-granting applications should diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-security-resources.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-security-resources.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-security-resources.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-security-resources.html 2007-10-01 12:17:43.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.5.�Sufficient resources</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"><link rel="prev" href="adg-security-usre-identity.html" title="4.4.�The identity of the user"><link rel="next" href="adg-libpam_misc.html" title="Chapter�5.�A library of miscellaneous helper functions"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.5.�Sufficient resources</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-security-usre-identity.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.� +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.5.�Sufficient resources</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"><link rel="prev" href="adg-security-usre-identity.html" title="4.4.�The identity of the user"><link rel="next" href="adg-libpam_misc.html" title="Chapter�5.�A library of miscellaneous helper functions"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.5.�Sufficient resources</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-security-usre-identity.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.� Security issues of <span class="emphasis"><em>Linux-PAM</em></span> </th><td width="20%" align="right">�<a accesskey="n" href="adg-libpam_misc.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-security-resources"></a>4.5.�Sufficient resources</h2></div></div></div><p> Care should be taken to ensure that the proper execution of an diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-security-service-name.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-security-service-name.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-security-service-name.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-security-service-name.html 2007-10-01 12:17:43.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.2.�Choice of a service name</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"><link rel="prev" href="adg-security-library-calls.html" title="4.1.�Care about standard library calls"><link rel="next" href="adg-security-conv-function.html" title="4.3.�The conversation function"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.2.�Choice of a service name</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-security-library-calls.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.� +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.2.�Choice of a service name</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"><link rel="prev" href="adg-security-library-calls.html" title="4.1.�Care about standard library calls"><link rel="next" href="adg-security-conv-function.html" title="4.3.�The conversation function"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.2.�Choice of a service name</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-security-library-calls.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.� Security issues of <span class="emphasis"><em>Linux-PAM</em></span> </th><td width="20%" align="right">�<a accesskey="n" href="adg-security-conv-function.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-security-service-name"></a>4.2.�Choice of a service name</h2></div></div></div><p> When picking the <span class="emphasis"><em>service-name</em></span> that @@ -22,12 +22,12 @@ To invoke some <span class="emphasis"><em>target</em></span> application by another name, the user may symbolically link the target application with the desired name. To be precise all the user need do is, - <span><strong class="command">ln -s /target/application ./preferred_name</strong></span> - and then run <span><strong class="command">./preferred_name</strong></span>. + <span class="command"><strong>ln -s /target/application ./preferred_name</strong></span> + and then run <span class="command"><strong>./preferred_name</strong></span>. </p><p> By studying the <span class="emphasis"><em>Linux-PAM</em></span> configuration file(s), an attacker can choose the - <span><strong class="command">preferred_name</strong></span> to be that of a service enjoying + <span class="command"><strong>preferred_name</strong></span> to be that of a service enjoying minimal protection; for example a game which uses <span class="emphasis"><em>Linux-PAM</em></span> to restrict access to certain hours of the day. If the service-name were to be linked diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-security-usre-identity.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-security-usre-identity.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-security-usre-identity.html 2007-07-10 12:02:33.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-security-usre-identity.html 2007-10-01 12:17:43.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.4.�The identity of the user</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"><link rel="prev" href="adg-security-conv-function.html" title="4.3.�The conversation function"><link rel="next" href="adg-security-resources.html" title="4.5.�Sufficient resources"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.4.�The identity of the user</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-security-conv-function.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.� +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.4.�The identity of the user</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="adg-security.html" title="Chapter�4.� Security issues of Linux-PAM"><link rel="prev" href="adg-security-conv-function.html" title="4.3.�The conversation function"><link rel="next" href="adg-security-resources.html" title="4.5.�Sufficient resources"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.4.�The identity of the user</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-security-conv-function.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.� Security issues of <span class="emphasis"><em>Linux-PAM</em></span> </th><td width="20%" align="right">�<a accesskey="n" href="adg-security-resources.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="adg-security-usre-identity"></a>4.4.�The identity of the user</h2></div></div></div><p> The <span class="emphasis"><em>Linux-PAM</em></span> modules will need diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/adg-see-also.html new/Linux-PAM-0.99.9.0/doc/adg/html/adg-see-also.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/adg-see-also.html 2007-07-10 12:02:34.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/adg-see-also.html 2007-10-01 12:17:44.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�10.�See also</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-files.html" title="Chapter�9.�Files"><link rel="next" href="adg-author.html" title="Chapter�11.�Author/acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�10.�See also</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-files.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-author.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-see-also"></a>Chapter�10.�See also</h2></div></div></div><div class="itemizedlist"><ul type="disc"><li><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�10.�See also</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="up" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="prev" href="adg-files.html" title="Chapter�9.�Files"><link rel="next" href="adg-author.html" title="Chapter�11.�Author/acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�10.�See also</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="adg-files.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-author.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="adg-see-also"></a>Chapter�10.�See also</h2></div></div></div><div class="itemizedlist"><ul type="disc"><li><p> The Linux-PAM System Administrators' Guide. </p></li><li><p> The Linux-PAM Module Writers' Guide. diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/html/Linux-PAM_ADG.html new/Linux-PAM-0.99.9.0/doc/adg/html/Linux-PAM_ADG.html --- old/Linux-PAM-0.99.8.1/doc/adg/html/Linux-PAM_ADG.html 2007-07-10 12:02:34.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/html/Linux-PAM_ADG.html 2007-10-01 12:17:44.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>The Linux-PAM Application Developers' Guide</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><meta name="description" content="This manual documents what an application developer needs to know about the Linux-PAM library. It describes how an application might use the Linux-PAM library to authenticate users. In addition it contains a description of the funtions to be found in libpam_misc library, that can be used in general applications. Finally, it contains some comments on PAM related security issues for the application developer."><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="next" href="adg-introduction.html" title="Chapter�1.�Introduction"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">The Linux-PAM Application Developers' Guide</th></tr><tr><td width="20%" align="left">�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-introduction.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="adg"></a>The Linux-PAM Application Developers' Guide</h1></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Andrew G.</span> <span class="surname">Morgan</span></h3><code class="email"><<a href="mailto:morgan@kernel.org">morgan@kernel.org</a>></code></div><div class="author"><h3 class="author"><span class="firstname">Thorsten</span> <span class="surname">Kukuk</span></h3><code class="email"><<a href="mailto:kukuk@thkukuk.de">kukuk@thkukuk.de</a>></code></div></div></div><div><p class="releaseinfo">Version 0.99.6.0, 5. August 2006</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>The Linux-PAM Application Developers' Guide</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><meta name="description" content="This manual documents what an application developer needs to know about the Linux-PAM library. It describes how an application might use the Linux-PAM library to authenticate users. In addition it contains a description of the funtions to be found in libpam_misc library, that can be used in general applications. Finally, it contains some comments on PAM related security issues for the application developer."><link rel="start" href="Linux-PAM_ADG.html" title="The Linux-PAM Application Developers' Guide"><link rel="next" href="adg-introduction.html" title="Chapter�1.�Introduction"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">The Linux-PAM Application Developers' Guide</th></tr><tr><td width="20%" align="left">�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="adg-introduction.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="adg"></a>The Linux-PAM Application Developers' Guide</h1></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Andrew G.</span> <span class="surname">Morgan</span></h3><code class="email"><<a class="email" href="mailto:morgan@kernel.org">morgan@kernel.org</a>></code></div><div class="author"><h3 class="author"><span class="firstname">Thorsten</span> <span class="surname">Kukuk</span></h3><code class="email"><<a class="email" href="mailto:kukuk@thkukuk.de">kukuk@thkukuk.de</a>></code></div></div></div><div><p class="releaseinfo">Version 0.99.6.0, 5. August 2006</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p> This manual documents what an application developer needs to know about the <span class="emphasis"><em>Linux-PAM</em></span> library. It describes how an application might use the Files old/Linux-PAM-0.99.8.1/doc/adg/Linux-PAM_ADG.pdf and new/Linux-PAM-0.99.9.0/doc/adg/Linux-PAM_ADG.pdf differ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/adg/Linux-PAM_ADG.txt new/Linux-PAM-0.99.9.0/doc/adg/Linux-PAM_ADG.txt --- old/Linux-PAM-0.99.8.1/doc/adg/Linux-PAM_ADG.txt 2007-07-10 12:02:25.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/adg/Linux-PAM_ADG.txt 2007-10-01 12:17:35.000000000 +0200 @@ -289,7 +289,7 @@ 3.1.2.1. DESCRIPTION The pam_end function terminates the PAM transaction and is the last function an -application should call in the PAM contenxt. Upon return the handle pamh is no +application should call in the PAM context. Upon return the handle pamh is no longer valid and all memory associated with it will be invalid. The pam_status argument should be set to the value returned to the application @@ -1019,6 +1019,9 @@ Without an '=' the pam_putenv() function will delete the corresponding variable from the PAM environment. +pam_putenv() operates on a copy of name_value, which means in contrast to +putenv(3), the application is responsible to free the data. + 3.1.13.2. RETURN VALUES PAM_PERM_DENIED diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/Linux-PAM_MWG.html new/Linux-PAM-0.99.9.0/doc/mwg/html/Linux-PAM_MWG.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/Linux-PAM_MWG.html 2007-07-10 12:03:05.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/Linux-PAM_MWG.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>The Linux-PAM Module Writers' Guide</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><meta name="description" content="This manual documents what a programmer needs to know in order to write a module that conforms to the Linux-PAM standard.It also discusses some security issues from the point of view of the module programmer."><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="next" href="mwg-introduction.html" title="Chapter�1.�Introduction"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">The Linux-PAM Module Writers' Guide</th></tr><tr><td width="20%" align="left">�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-introduction.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="mwg"></a>The Linux-PAM Module Writers' Guide</h1></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Andrew G.</span> <span class="surname">Morgan</span></h3><code class="email"><<a href="mailto:morgan@kernel.org">morgan@kernel.org</a>></code></div><div class="author"><h3 class="author"><span class="firstname">Thorsten</span> <span class="surname">Kukuk</span></h3><code class="email"><<a href="mailto:kukuk@thkukuk.de">kukuk@thkukuk.de</a>></code></div></div></div><div><p class="releaseinfo">Version 0.99.6.0, 5. August 2006</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>The Linux-PAM Module Writers' Guide</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><meta name="description" content="This manual documents what a programmer needs to know in order to write a module that conforms to the Linux-PAM standard.It also discusses some security issues from the point of view of the module programmer."><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="next" href="mwg-introduction.html" title="Chapter�1.�Introduction"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">The Linux-PAM Module Writers' Guide</th></tr><tr><td width="20%" align="left">�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-introduction.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="mwg"></a>The Linux-PAM Module Writers' Guide</h1></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Andrew G.</span> <span class="surname">Morgan</span></h3><code class="email"><<a class="email" href="mailto:morgan@kernel.org">morgan@kernel.org</a>></code></div><div class="author"><h3 class="author"><span class="firstname">Thorsten</span> <span class="surname">Kukuk</span></h3><code class="email"><<a class="email" href="mailto:kukuk@thkukuk.de">kukuk@thkukuk.de</a>></code></div></div></div><div><p class="releaseinfo">Version 0.99.6.0, 5. August 2006</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p> This manual documents what a programmer needs to know in order to write a module that conforms to the <span class="emphasis"><em>Linux-PAM</em></span> standard.It also diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-author.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-author.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-author.html 2007-07-10 12:03:05.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-author.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�8.�Author/acknowledgments</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-see-also.html" title="Chapter�7.�See also"><link rel="next" href="mwg-copyright.html" title="Chapter�9.�Copyright information for this document"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�8.�Author/acknowledgments</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-see-also.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-copyright.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-author"></a>Chapter�8.�Author/acknowledgments</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�8.�Author/acknowledgments</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-see-also.html" title="Chapter�7.�See also"><link rel="next" href="mwg-copyright.html" title="Chapter�9.�Copyright information for this document"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�8.�Author/acknowledgments</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-see-also.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-copyright.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-author"></a>Chapter�8.�Author/acknowledgments</h2></div></div></div><p> This document was written by Andrew G. Morgan (morgan@kernel.org) with many contributions from Chris Adams, Peter Allgeyer, Tim Baverstock, Tim Berger, Craig S. Bell, diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-copyright.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-copyright.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-copyright.html 2007-07-10 12:03:05.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-copyright.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�9.�Copyright information for this document</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-author.html" title="Chapter�8.�Author/acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�9.�Copyright information for this document</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-author.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�</td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-copyright"></a>Chapter�9.�Copyright information for this document</h2></div></div></div><pre class="programlisting"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�9.�Copyright information for this document</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-author.html" title="Chapter�8.�Author/acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�9.�Copyright information for this document</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-author.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�</td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-copyright"></a>Chapter�9.�Copyright information for this document</h2></div></div></div><pre class="programlisting"> Copyright (c) 2006 Thorsten Kukuk <kukuk@thkukuk.de> Copyright (c) 1996-2002 Andrew G. Morgan <morgan@kernel.org> </pre><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-example.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-example.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-example.html 2007-07-10 12:03:05.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-example.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�6.�An example module</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-see-programming-libs.html" title="5.3.�Modules that require system libraries"><link rel="next" href="mwg-see-also.html" title="Chapter�7.�See also"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�6.�An example module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-see-programming-libs.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-see-also.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-example"></a>Chapter�6.�An example module</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�6.�An example module</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-see-programming-libs.html" title="5.3.�Modules that require system libraries"><link rel="next" href="mwg-see-also.html" title="Chapter�7.�See also"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�6.�An example module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-see-programming-libs.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-see-also.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-example"></a>Chapter�6.�An example module</h2></div></div></div><p> At some point, we may include a fully commented example of a module in this document. For now, please look at the modules directory of the <span class="emphasis"><em>Linux-PAM</em></span> sources. diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-by-module.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-by-module.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-by-module.html 2007-07-10 12:03:04.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-by-module.html 2007-10-01 12:18:11.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�2.�What can be expected by the module</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-introducton-synopsis.html" title="1.2.�Synopsis"><link rel="next" href="mwg-expected-by-module-item.html" title="2.1.� Getting and setting PAM_ITEMs and data"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�2.�What can be expected by the module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-introducton-synopsis.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-by-module-item.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-expected-by-module"></a>Chapter�2.�What can be expected by the module</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="mwg-expected-by-module-item.html">2.1. +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�2.�What can be expected by the module</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-introducton-synopsis.html" title="1.2.�Synopsis"><link rel="next" href="mwg-expected-by-module-item.html" title="2.1.� Getting and setting PAM_ITEMs and data"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�2.�What can be expected by the module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-introducton-synopsis.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-by-module-item.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-expected-by-module"></a>Chapter�2.�What can be expected by the module</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="mwg-expected-by-module-item.html">2.1. Getting and setting <span class="emphasis"><em>PAM_ITEM</em></span>s and <span class="emphasis"><em>data</em></span> </a></span></dt><dd><dl><dt><span class="section"><a href="mwg-expected-by-module-item.html#mwg-pam_set_data">2.1.1. Set module internal data</a></span></dt><dt><span class="section"><a href="mwg-expected-by-module-item.html#mwg-pam_get_data">2.1.2. Get module internal data</a></span></dt><dt><span class="section"><a href="mwg-expected-by-module-item.html#mwg-pam_set_item">2.1.3. Setting PAM items</a></span></dt><dt><span class="section"><a href="mwg-expected-by-module-item.html#mwg-pam_get_item">2.1.4. Getting PAM items</a></span></dt><dt><span class="section"><a href="mwg-expected-by-module-item.html#mwg-pam_get_user">2.1.5. Get user name</a></span></dt><dt><span class="section"><a href="mwg-expected-by-module-item.html#mwg-pam_conv">2.1.6. The conversation function</a></span></dt><dt><span class="section"><a href="mwg-expected-by-module-item.html#adg-pam_putenv">2.1.7. Set or change PAM environment variable</a></span></dt><dt><span class="section"><a href="mwg-expected-by-module-item.html#adg-pam_getenv">2.1.8. Get a PAM environment variable</a></span></dt><dt><span class="section"><a href="mwg-expected-by-module-item.html#adg-pam_getenvlist">2.1.9. Getting the PAM environment</a></span></dt></dl></dd><dt><span class="section"><a href="mwg-expected-by-module-other.html">2.2. diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-by-module-item.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-by-module-item.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-by-module-item.html 2007-07-10 12:03:04.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-by-module-item.html 2007-10-01 12:18:11.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>2.1.� Getting and setting PAM_ITEMs and data</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-by-module.html" title="Chapter�2.�What can be expected by the module"><link rel="prev" href="mwg-expected-by-module.html" title="Chapter�2.�What can be expected by the module"><link rel="next" href="mwg-expected-by-module-other.html" title="2.2.� Other functions provided by libpam"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">2.1.� +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>2.1.� Getting and setting PAM_ITEMs and data</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-by-module.html" title="Chapter�2.�What can be expected by the module"><link rel="prev" href="mwg-expected-by-module.html" title="Chapter�2.�What can be expected by the module"><link rel="next" href="mwg-expected-by-module-other.html" title="2.2.� Other functions provided by libpam"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">2.1.� Getting and setting <span class="emphasis"><em>PAM_ITEM</em></span>s and <span class="emphasis"><em>data</em></span> </th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-by-module.html">Prev</a>�</td><th width="60%" align="center">Chapter�2.�What can be expected by the module</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-by-module-other.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-expected-by-module-item"></a>2.1.� @@ -430,9 +430,14 @@ listed separately to indicate that this is the correct way to achieve such a setting. </p></dd><dt><span class="term">NAME</span></dt><dd><p> - Without an '=' the pam_putenv() function will delete the + Without an '=' the <code class="function">pam_putenv</code>() function + will delete the corresponding variable from the PAM environment. - </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="adg-pam_putenv-return_values"></a>2.1.7.2.�RETURN VALUES</h4></div></div></div><div class="variablelist"><dl><dt><span class="term">PAM_PERM_DENIED</span></dt><dd><p> + </p></dd></dl></div><p> + <code class="function">pam_putenv</code>() operates on a copy of + <span class="emphasis"><em>name_value</em></span>, which means in contrast to + <span class="citerefentry"><span class="refentrytitle">putenv</span>(3)</span>, the application is responsible to free the data. + </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="adg-pam_putenv-return_values"></a>2.1.7.2.�RETURN VALUES</h4></div></div></div><div class="variablelist"><dl><dt><span class="term">PAM_PERM_DENIED</span></dt><dd><p> Argument <span class="emphasis"><em>name_value</em></span> given is a NULL pointer. </p></dd><dt><span class="term">PAM_BAD_ITEM</span></dt><dd><p> Variable requested (for deletion) is not currently set. diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-by-module-other.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-by-module-other.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-by-module-other.html 2007-07-10 12:03:04.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-by-module-other.html 2007-10-01 12:18:11.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>2.2.� Other functions provided by libpam</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-by-module.html" title="Chapter�2.�What can be expected by the module"><link rel="prev" href="mwg-expected-by-module-item.html" title="2.1.� Getting and setting PAM_ITEMs and data"><link rel="next" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">2.2.� +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>2.2.� Other functions provided by libpam</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-by-module.html" title="Chapter�2.�What can be expected by the module"><link rel="prev" href="mwg-expected-by-module-item.html" title="2.1.� Getting and setting PAM_ITEMs and data"><link rel="next" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">2.2.� Other functions provided by <code class="filename">libpam</code> </th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-by-module-item.html">Prev</a>�</td><th width="60%" align="center">Chapter�2.�What can be expected by the module</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-of-module.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-expected-by-module-other"></a>2.2.� Other functions provided by <code class="filename">libpam</code> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-of-module-acct.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-of-module-acct.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-of-module-acct.html 2007-07-10 12:03:04.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-of-module-acct.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,6 +1,6 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.3.�Account management</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"><link rel="prev" href="mwg-expected-of-module-auth.html" title="3.2.�Authentication management"><link rel="next" href="mwg-expected-of-module-session.html" title="3.4.�Session management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.3.�Account management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-of-module-auth.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.�What is expected of a module</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-of-module-session.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-expected-of-module-acct"></a>3.3.�Account management</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.3.�Account management</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"><link rel="prev" href="mwg-expected-of-module-auth.html" title="3.2.�Authentication management"><link rel="next" href="mwg-expected-of-module-session.html" title="3.4.�Session management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.3.�Account management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-of-module-auth.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.�What is expected of a module</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-of-module-session.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-expected-of-module-acct"></a>3.3.�Account management</h2></div></div></div><p> To be correctly initialized, <em class="parameter"><code>PAM_SM_ACCOUNT</code></em> - must be <span><strong class="command">#define</strong></span>'d prior to including + must be <span class="command"><strong>#define</strong></span>'d prior to including <code class="function"><security/pam_modules.h></code>. This will ensure that the prototypes for static modules are properly declared. </p><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="mwg-pam_sm_acct_mgmt"></a>3.3.1.�Service function for account management</h3></div></div></div><div class="funcsynopsis"><pre class="funcsynopsisinfo">#define PAM_SM_ACCOUNT</pre><pre class="funcsynopsisinfo">#include <security/pam_modules.h></pre><table border="0" summary="Function synopsis" cellspacing="0" cellpadding="0" style="padding-bottom: 1em"><tr><td><code class="funcdef">PAM_EXTERN int <b class="fsfunc">pam_sm_acct_mgmt</b>(</code></td><td><var class="pdparam">pamh</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">flags</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">argc</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">argv</var><code>)</code>;</td><td>�</td></tr></table><table border="0" summary="Function argument synopsis" cellspacing="0" cellpadding="0"><tr><td><code>pam_handle_t *</code>�</td><td><code><var class="pdparam">pamh</var>;</code></td></tr><tr><td><code>int </code>�</td><td><code><var class="pdparam">flags</var>;</code></td></tr><tr><td><code>int </code>�</td><td><code><var class="pdparam">argc</var>;</code></td></tr><tr><td><code>const char **</code>�</td><td><code><var class="pdparam">argv</var>;</code></td></tr></table></div><div class="section" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="mwg-pam_sm_acct_mgmt-description"></a>3.3.1.1.�DESCRIPTION</h4></div></div></div><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-of-module-auth.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-of-module-auth.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-of-module-auth.html 2007-07-10 12:03:04.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-of-module-auth.html 2007-10-01 12:18:11.000000000 +0200 @@ -1,6 +1,6 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.2.�Authentication management</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"><link rel="prev" href="mwg-expected-of-module-overview.html" title="3.1.�Overview"><link rel="next" href="mwg-expected-of-module-acct.html" title="3.3.�Account management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.2.�Authentication management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-of-module-overview.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.�What is expected of a module</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-of-module-acct.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-expected-of-module-auth"></a>3.2.�Authentication management</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.2.�Authentication management</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"><link rel="prev" href="mwg-expected-of-module-overview.html" title="3.1.�Overview"><link rel="next" href="mwg-expected-of-module-acct.html" title="3.3.�Account management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.2.�Authentication management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-of-module-overview.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.�What is expected of a module</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-of-module-acct.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-expected-of-module-auth"></a>3.2.�Authentication management</h2></div></div></div><p> To be correctly initialized, <em class="parameter"><code>PAM_SM_AUTH</code></em> - must be <span><strong class="command">#define</strong></span>'d prior to including + must be <span class="command"><strong>#define</strong></span>'d prior to including <code class="function"><security/pam_modules.h></code>. This will ensure that the prototypes for static modules are properly declared. </p><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="mwg-pam_sm_authenticate"></a>3.2.1.�Service function for user authentication</h3></div></div></div><div class="funcsynopsis"><pre class="funcsynopsisinfo">#define PAM_SM_AUTH</pre><pre class="funcsynopsisinfo">#include <security/pam_modules.h></pre><table border="0" summary="Function synopsis" cellspacing="0" cellpadding="0" style="padding-bottom: 1em"><tr><td><code class="funcdef">PAM_EXTERN int <b class="fsfunc">pam_sm_authenticate</b>(</code></td><td><var class="pdparam">pamh</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">flags</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">argc</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">argv</var><code>)</code>;</td><td>�</td></tr></table><table border="0" summary="Function argument synopsis" cellspacing="0" cellpadding="0"><tr><td><code>pam_handle_t *</code>�</td><td><code><var class="pdparam">pamh</var>;</code></td></tr><tr><td><code>int </code>�</td><td><code><var class="pdparam">flags</var>;</code></td></tr><tr><td><code>int </code>�</td><td><code><var class="pdparam">argc</var>;</code></td></tr><tr><td><code>const char **</code>�</td><td><code><var class="pdparam">argv</var>;</code></td></tr></table></div><div class="section" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="mwg-pam_sm_authenticate-description"></a>3.2.1.1.�DESCRIPTION</h4></div></div></div><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-of-module-chauthtok.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-of-module-chauthtok.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-of-module-chauthtok.html 2007-07-10 12:03:04.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-of-module-chauthtok.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,6 +1,6 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.5.�Authentication token management</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"><link rel="prev" href="mwg-expected-of-module-session.html" title="3.4.�Session management"><link rel="next" href="mwg-see-options.html" title="Chapter�4.�Generic optional arguments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.5.�Authentication token management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-of-module-session.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.�What is expected of a module</th><td width="20%" align="right">�<a accesskey="n" href="mwg-see-options.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-expected-of-module-chauthtok"></a>3.5.�Authentication token management</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.5.�Authentication token management</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"><link rel="prev" href="mwg-expected-of-module-session.html" title="3.4.�Session management"><link rel="next" href="mwg-see-options.html" title="Chapter�4.�Generic optional arguments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.5.�Authentication token management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-of-module-session.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.�What is expected of a module</th><td width="20%" align="right">�<a accesskey="n" href="mwg-see-options.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-expected-of-module-chauthtok"></a>3.5.�Authentication token management</h2></div></div></div><p> To be correctly initialized, <em class="parameter"><code>PAM_SM_PASSWORD</code></em> - must be <span><strong class="command">#define</strong></span>'d prior to including + must be <span class="command"><strong>#define</strong></span>'d prior to including <code class="function"><security/pam_modules.h></code>. This will ensure that the prototypes for static modules are properly declared. </p><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="mwg-pam_sm_chauthtok"></a>3.5.1.�Service function to alter authentication token</h3></div></div></div><div class="funcsynopsis"><pre class="funcsynopsisinfo">#define PAM_SM_PASSWORD</pre><pre class="funcsynopsisinfo">#include <security/pam_modules.h></pre><table border="0" summary="Function synopsis" cellspacing="0" cellpadding="0" style="padding-bottom: 1em"><tr><td><code class="funcdef">PAM_EXTERN int <b class="fsfunc">pam_sm_chauthtok</b>(</code></td><td><var class="pdparam">pamh</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">flags</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">argc</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">argv</var><code>)</code>;</td><td>�</td></tr></table><table border="0" summary="Function argument synopsis" cellspacing="0" cellpadding="0"><tr><td><code>pam_handle_t *</code>�</td><td><code><var class="pdparam">pamh</var>;</code></td></tr><tr><td><code>int </code>�</td><td><code><var class="pdparam">flags</var>;</code></td></tr><tr><td><code>int </code>�</td><td><code><var class="pdparam">argc</var>;</code></td></tr><tr><td><code>const char **</code>�</td><td><code><var class="pdparam">argv</var>;</code></td></tr></table></div><div class="section" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="mwg-pam_sm_chauthtok-description"></a>3.5.1.1.�DESCRIPTION</h4></div></div></div><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-of-module.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-of-module.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-of-module.html 2007-07-10 12:03:04.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-of-module.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�3.�What is expected of a module</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-expected-by-module-other.html" title="2.2.� Other functions provided by libpam"><link rel="next" href="mwg-expected-of-module-overview.html" title="3.1.�Overview"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�3.�What is expected of a module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-by-module-other.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-of-module-overview.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-expected-of-module"></a>Chapter�3.�What is expected of a module</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="mwg-expected-of-module-overview.html">3.1. Overview</a></span></dt><dd><dl><dt><span class="section"><a href="mwg-expected-of-module-overview.html#mwg-expected-of-module-overview-1">3.1.1. Functional independence</a></span></dt><dt><span class="section"><a href="mwg-expected-of-module-overview.html#mwg-expected-of-module-overview-2">3.1.2. Minimizing administration problems</a></span></dt><dt><span class="section"><a href="mwg-expected-of-module-overview.html#mwg-expected-of-module-overview-3">3.1.3. Arguments supplied to the module</a></span></dt></dl></dd><dt><span class="section"><a href="mwg-expected-of-module-auth.html">3.2. Authentication management</a></span></dt><dd><dl><dt><span class="section"><a href="mwg-expected-of-module-auth.html#mwg-pam_sm_authenticate">3.2.1. Service function for user authentication</a></span></dt><dt><span class="section"><a href="mwg-expected-of-module-auth.html#mwg-pam_sm_setcred">3.2.2. Service function to alter credentials</a></span></dt></dl></dd><dt><span class="section"><a href="mwg-expected-of-module-acct.html">3.3. Account management</a></span></dt><dd><dl><dt><span class="section"><a href="mwg-expected-of-module-acct.html#mwg-pam_sm_acct_mgmt">3.3.1. Service function for account management</a></span></dt></dl></dd><dt><span class="section"><a href="mwg-expected-of-module-session.html">3.4. Session management</a></span></dt><dd><dl><dt><span class="section"><a href="mwg-expected-of-module-session.html#mwg-pam_sm_open_session">3.4.1. Service function to start session management</a></span></dt><dt><span class="section"><a href="mwg-expected-of-module-session.html#mwg-pam_sm_close_session">3.4.2. Service function to terminate session management</a></span></dt></dl></dd><dt><span class="section"><a href="mwg-expected-of-module-chauthtok.html">3.5. Authentication token management</a></span></dt><dd><dl><dt><span class="section"><a href="mwg-expected-of-module-chauthtok.html#mwg-pam_sm_chauthtok">3.5.1. Service function to alter authentication token</a></span></dt></dl></dd></dl></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�3.�What is expected of a module</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-expected-by-module-other.html" title="2.2.� Other functions provided by libpam"><link rel="next" href="mwg-expected-of-module-overview.html" title="3.1.�Overview"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�3.�What is expected of a module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-by-module-other.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-of-module-overview.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-expected-of-module"></a>Chapter�3.�What is expected of a module</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="mwg-expected-of-module-overview.html">3.1. Overview</a></span></dt><dd><dl><dt><span class="section"><a href="mwg-expected-of-module-overview.html#mwg-expected-of-module-overview-1">3.1.1. Functional independence</a></span></dt><dt><span class="section"><a href="mwg-expected-of-module-overview.html#mwg-expected-of-module-overview-2">3.1.2. Minimizing administration problems</a></span></dt><dt><span class="section"><a href="mwg-expected-of-module-overview.html#mwg-expected-of-module-overview-3">3.1.3. Arguments supplied to the module</a></span></dt></dl></dd><dt><span class="section"><a href="mwg-expected-of-module-auth.html">3.2. Authentication management</a></span></dt><dd><dl><dt><span class="section"><a href="mwg-expected-of-module-auth.html#mwg-pam_sm_authenticate">3.2.1. Service function for user authentication</a></span></dt><dt><span class="section"><a href="mwg-expected-of-module-auth.html#mwg-pam_sm_setcred">3.2.2. Service function to alter credentials</a></span></dt></dl></dd><dt><span class="section"><a href="mwg-expected-of-module-acct.html">3.3. Account management</a></span></dt><dd><dl><dt><span class="section"><a href="mwg-expected-of-module-acct.html#mwg-pam_sm_acct_mgmt">3.3.1. Service function for account management</a></span></dt></dl></dd><dt><span class="section"><a href="mwg-expected-of-module-session.html">3.4. Session management</a></span></dt><dd><dl><dt><span class="section"><a href="mwg-expected-of-module-session.html#mwg-pam_sm_open_session">3.4.1. Service function to start session management</a></span></dt><dt><span class="section"><a href="mwg-expected-of-module-session.html#mwg-pam_sm_close_session">3.4.2. Service function to terminate session management</a></span></dt></dl></dd><dt><span class="section"><a href="mwg-expected-of-module-chauthtok.html">3.5. Authentication token management</a></span></dt><dd><dl><dt><span class="section"><a href="mwg-expected-of-module-chauthtok.html#mwg-pam_sm_chauthtok">3.5.1. Service function to alter authentication token</a></span></dt></dl></dd></dl></div><p> The module must supply a sub-set of the six functions listed below. Together they define the function of a <span class="emphasis"><em>Linux-PAM module</em></span>. Module developers diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-of-module-overview.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-of-module-overview.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-of-module-overview.html 2007-07-10 12:03:04.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-of-module-overview.html 2007-10-01 12:18:11.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.1.�Overview</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"><link rel="prev" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"><link rel="next" href="mwg-expected-of-module-auth.html" title="3.2.�Authentication management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.1.�Overview</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-of-module.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.�What is expected of a module</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-of-module-auth.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-expected-of-module-overview"></a>3.1.�Overview</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.1.�Overview</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"><link rel="prev" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"><link rel="next" href="mwg-expected-of-module-auth.html" title="3.2.�Authentication management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.1.�Overview</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-of-module.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.�What is expected of a module</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-of-module-auth.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-expected-of-module-overview"></a>3.1.�Overview</h2></div></div></div><p> The six module functions are grouped into four independent management groups. These groups are as follows: <span class="emphasis"><em>authentication</em></span>, <span class="emphasis"><em>account</em></span>, @@ -19,10 +19,10 @@ without having first requested that <span class="emphasis"><em>Linux-PAM</em></span> authenticate the user. In some cases this may be deemed appropriate: when - <span><strong class="command">root</strong></span> wants to change the authentication + <span class="command"><strong>root</strong></span> wants to change the authentication token of some lesser user. In other cases it may not be - appropriate: when <span><strong class="command">joe</strong></span> maliciously wants - to reset <span><strong class="command">alice</strong></span>'s password; or when anyone + appropriate: when <span class="command"><strong>joe</strong></span> maliciously wants + to reset <span class="command"><strong>alice</strong></span>'s password; or when anyone other than the user themself wishes to reset their <span class="emphasis"><em>KERBEROS</em></span> authentication token. A policy for this action should be defined by any reasonable diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-of-module-session.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-of-module-session.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-expected-of-module-session.html 2007-07-10 12:03:04.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-expected-of-module-session.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,6 +1,6 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.4.�Session management</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"><link rel="prev" href="mwg-expected-of-module-acct.html" title="3.3.�Account management"><link rel="next" href="mwg-expected-of-module-chauthtok.html" title="3.5.�Authentication token management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.4.�Session management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-of-module-acct.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.�What is expected of a module</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-of-module-chauthtok.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-expected-of-module-session"></a>3.4.�Session management</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3.4.�Session management</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-expected-of-module.html" title="Chapter�3.�What is expected of a module"><link rel="prev" href="mwg-expected-of-module-acct.html" title="3.3.�Account management"><link rel="next" href="mwg-expected-of-module-chauthtok.html" title="3.5.�Authentication token management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3.4.�Session management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-of-module-acct.html">Prev</a>�</td><th width="60%" align="center">Chapter�3.�What is expected of a module</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-of-module-chauthtok.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-expected-of-module-session"></a>3.4.�Session management</h2></div></div></div><p> To be correctly initialized, <em class="parameter"><code>PAM_SM_SESSION</code></em> - must be <span><strong class="command">#define</strong></span>'d prior to including + must be <span class="command"><strong>#define</strong></span>'d prior to including <code class="function"><security/pam_modules.h></code>. This will ensure that the prototypes for static modules are properly declared. </p><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="mwg-pam_sm_open_session"></a>3.4.1.�Service function to start session management</h3></div></div></div><div class="funcsynopsis"><pre class="funcsynopsisinfo">#define PAM_SM_SESSION</pre><pre class="funcsynopsisinfo">#include <security/pam_modules.h></pre><table border="0" summary="Function synopsis" cellspacing="0" cellpadding="0" style="padding-bottom: 1em"><tr><td><code class="funcdef">PAM_EXTERN int <b class="fsfunc">pam_sm_open_session</b>(</code></td><td><var class="pdparam">pamh</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">flags</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">argc</var>, </td><td>�</td></tr><tr><td>�</td><td><var class="pdparam">argv</var><code>)</code>;</td><td>�</td></tr></table><table border="0" summary="Function argument synopsis" cellspacing="0" cellpadding="0"><tr><td><code>pam_handle_t *</code>�</td><td><code><var class="pdparam">pamh</var>;</code></td></tr><tr><td><code>int </code>�</td><td><code><var class="pdparam">flags</var>;</code></td></tr><tr><td><code>int </code>�</td><td><code><var class="pdparam">argc</var>;</code></td></tr><tr><td><code>const char **</code>�</td><td><code><var class="pdparam">argv</var>;</code></td></tr></table></div><div class="section" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="mwg-pam_sm_open_session-description"></a>3.4.1.1.�DESCRIPTION</h4></div></div></div><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-introduction-description.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-introduction-description.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-introduction-description.html 2007-07-10 12:03:03.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-introduction-description.html 2007-10-01 12:18:11.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>1.1.�Description</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-introduction.html" title="Chapter�1.�Introduction"><link rel="prev" href="mwg-introduction.html" title="Chapter�1.�Introduction"><link rel="next" href="mwg-introducton-synopsis.html" title="1.2.�Synopsis"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">1.1.�Description</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-introduction.html">Prev</a>�</td><th width="60%" align="center">Chapter�1.�Introduction</th><td width="20%" align="right">�<a accesskey="n" href="mwg-introducton-synopsis.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-introduction-description"></a>1.1.�Description</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>1.1.�Description</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-introduction.html" title="Chapter�1.�Introduction"><link rel="prev" href="mwg-introduction.html" title="Chapter�1.�Introduction"><link rel="next" href="mwg-introducton-synopsis.html" title="1.2.�Synopsis"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">1.1.�Description</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-introduction.html">Prev</a>�</td><th width="60%" align="center">Chapter�1.�Introduction</th><td width="20%" align="right">�<a accesskey="n" href="mwg-introducton-synopsis.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-introduction-description"></a>1.1.�Description</h2></div></div></div><p> <span class="emphasis"><em>Linux-PAM</em></span> (Pluggable Authentication Modules for Linux) is a library that enables the local system administrator to choose how individual applications authenticate diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-introduction.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-introduction.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-introduction.html 2007-07-10 12:03:03.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-introduction.html 2007-10-01 12:18:11.000000000 +0200 @@ -1 +1 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�1.�Introduction</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="next" href="mwg-introduction-description.html" title="1.1.�Description"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�1.�Introduction</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Linux-PAM_MWG.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-introduction-description.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-introduction"></a>Chapter�1.�Introduction</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="mwg-introduction-description.html">1.1. Description</a></span></dt><dt><span class="section"><a href="mwg-introducton-synopsis.html">1.2. Synopsis</a></span></dt></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Linux-PAM_MWG.html">Prev</a>�</td><td width="20%" align="center">�</td><td width="40%" align="right">�<a accesskey="n" href="mwg-introduction-description.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">The Linux-PAM Module Writers' Guide�</td><td width="20%" align="center"><a accesskey="h" href="Linux-PAM_MWG.html">Home</a></td><td width="40%" align="right" valign="top">�1.1.�Description</td></tr></table></div></body></html> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�1.�Introduction</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="next" href="mwg-introduction-description.html" title="1.1.�Description"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�1.�Introduction</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Linux-PAM_MWG.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-introduction-description.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-introduction"></a>Chapter�1.�Introduction</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="mwg-introduction-description.html">1.1. Description</a></span></dt><dt><span class="section"><a href="mwg-introducton-synopsis.html">1.2. Synopsis</a></span></dt></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Linux-PAM_MWG.html">Prev</a>�</td><td width="20%" align="center">�</td><td width="40%" align="right">�<a accesskey="n" href="mwg-introduction-description.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">The Linux-PAM Module Writers' Guide�</td><td width="20%" align="center"><a accesskey="h" href="Linux-PAM_MWG.html">Home</a></td><td width="40%" align="right" valign="top">�1.1.�Description</td></tr></table></div></body></html> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-introducton-synopsis.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-introducton-synopsis.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-introducton-synopsis.html 2007-07-10 12:03:03.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-introducton-synopsis.html 2007-10-01 12:18:11.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>1.2.�Synopsis</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-introduction.html" title="Chapter�1.�Introduction"><link rel="prev" href="mwg-introduction-description.html" title="1.1.�Description"><link rel="next" href="mwg-expected-by-module.html" title="Chapter�2.�What can be expected by the module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">1.2.�Synopsis</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-introduction-description.html">Prev</a>�</td><th width="60%" align="center">Chapter�1.�Introduction</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-by-module.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-introducton-synopsis"></a>1.2.�Synopsis</h2></div></div></div><pre class="programlisting"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>1.2.�Synopsis</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-introduction.html" title="Chapter�1.�Introduction"><link rel="prev" href="mwg-introduction-description.html" title="1.1.�Description"><link rel="next" href="mwg-expected-by-module.html" title="Chapter�2.�What can be expected by the module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">1.2.�Synopsis</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-introduction-description.html">Prev</a>�</td><th width="60%" align="center">Chapter�1.�Introduction</th><td width="20%" align="right">�<a accesskey="n" href="mwg-expected-by-module.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-introducton-synopsis"></a>1.2.�Synopsis</h2></div></div></div><pre class="programlisting"> #include <security/pam_modules.h> gcc -fPIC -c pam_module.c diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-see-also.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-see-also.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-see-also.html 2007-07-10 12:03:05.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-see-also.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�7.�See also</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-example.html" title="Chapter�6.�An example module"><link rel="next" href="mwg-author.html" title="Chapter�8.�Author/acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�7.�See also</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-example.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-author.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-see-also"></a>Chapter�7.�See also</h2></div></div></div><div class="itemizedlist"><ul type="disc"><li><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�7.�See also</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-example.html" title="Chapter�6.�An example module"><link rel="next" href="mwg-author.html" title="Chapter�8.�Author/acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�7.�See also</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-example.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-author.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-see-also"></a>Chapter�7.�See also</h2></div></div></div><div class="itemizedlist"><ul type="disc"><li><p> The Linux-PAM System Administrators' Guide. </p></li><li><p> The Linux-PAM Application Developers' Guide. diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-see-options.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-see-options.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-see-options.html 2007-07-10 12:03:04.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-see-options.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�4.�Generic optional arguments</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-expected-of-module-chauthtok.html" title="3.5.�Authentication token management"><link rel="next" href="mwg-see-programming.html" title="Chapter�5.�Programming notes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�4.�Generic optional arguments</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-of-module-chauthtok.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-see-programming.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-see-options"></a>Chapter�4.�Generic optional arguments</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�4.�Generic optional arguments</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-expected-of-module-chauthtok.html" title="3.5.�Authentication token management"><link rel="next" href="mwg-see-programming.html" title="Chapter�5.�Programming notes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�4.�Generic optional arguments</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-expected-of-module-chauthtok.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-see-programming.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-see-options"></a>Chapter�4.�Generic optional arguments</h2></div></div></div><p> Here we list the generic arguments that all modules can expect to be passed. They are not mandatory, and their absence should be accepted without comment by the module. @@ -11,6 +11,6 @@ (by a call to <code class="function">pam_get_item()</code> for the <em class="parameter"><code>PAM_AUTHTOK</code></em> item), and use that. If that doesn't work, then the user will not be authenticated. - (This option is intended for <span><strong class="command">auth</strong></span> and - <span><strong class="command">passwd</strong></span> modules only). + (This option is intended for <span class="command"><strong>auth</strong></span> and + <span class="command"><strong>passwd</strong></span> modules only). </p></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="mwg-expected-of-module-chauthtok.html">Prev</a>�</td><td width="20%" align="center">�</td><td width="40%" align="right">�<a accesskey="n" href="mwg-see-programming.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">3.5.�Authentication token management�</td><td width="20%" align="center"><a accesskey="h" href="Linux-PAM_MWG.html">Home</a></td><td width="40%" align="right" valign="top">�Chapter�5.�Programming notes</td></tr></table></div></body></html> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-see-programming.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-see-programming.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-see-programming.html 2007-07-10 12:03:05.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-see-programming.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�5.�Programming notes</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-see-options.html" title="Chapter�4.�Generic optional arguments"><link rel="next" href="mwg-see-programming-sec.html" title="5.1.�Security issues for module creation"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�5.�Programming notes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-see-options.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-see-programming-sec.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-see-programming"></a>Chapter�5.�Programming notes</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="mwg-see-programming-sec.html">5.1. Security issues for module creation</a></span></dt><dd><dl><dt><span class="section"><a href="mwg-see-programming-sec.html#mwg-see-programming-sec-res">5.1.1. Sufficient resources</a></span></dt><dt><span class="section"><a href="mwg-see-programming-sec.html#mwg-see-programming-sec-who">5.1.2. Who�s who?</a></span></dt><dt><span class="section"><a href="mwg-see-programming-sec.html#mwg-see-programming-sec-conv">5.1.3. Using the conversation function</a></span></dt><dt><span class="section"><a href="mwg-see-programming-sec.html#mwg-see-programming-sec-token">5.1.4. Authentication tokens</a></span></dt></dl></dd><dt><span class="section"><a href="mwg-see-programming-syslog.html">5.2. Use of <span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a></span></dt><dt><span class="section"><a href="mwg-see-programming-libs.html">5.3. Modules that require system libraries</a></span></dt></dl></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�5.�Programming notes</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="prev" href="mwg-see-options.html" title="Chapter�4.�Generic optional arguments"><link rel="next" href="mwg-see-programming-sec.html" title="5.1.�Security issues for module creation"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�5.�Programming notes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-see-options.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="mwg-see-programming-sec.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="mwg-see-programming"></a>Chapter�5.�Programming notes</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="mwg-see-programming-sec.html">5.1. Security issues for module creation</a></span></dt><dd><dl><dt><span class="section"><a href="mwg-see-programming-sec.html#mwg-see-programming-sec-res">5.1.1. Sufficient resources</a></span></dt><dt><span class="section"><a href="mwg-see-programming-sec.html#mwg-see-programming-sec-who">5.1.2. Who�s who?</a></span></dt><dt><span class="section"><a href="mwg-see-programming-sec.html#mwg-see-programming-sec-conv">5.1.3. Using the conversation function</a></span></dt><dt><span class="section"><a href="mwg-see-programming-sec.html#mwg-see-programming-sec-token">5.1.4. Authentication tokens</a></span></dt></dl></dd><dt><span class="section"><a href="mwg-see-programming-syslog.html">5.2. Use of <span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a></span></dt><dt><span class="section"><a href="mwg-see-programming-libs.html">5.3. Modules that require system libraries</a></span></dt></dl></div><p> Here we collect some pointers for the module writer to bear in mind when writing/developing a <span class="emphasis"><em>Linux-PAM</em></span> compatible module. diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-see-programming-libs.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-see-programming-libs.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-see-programming-libs.html 2007-07-10 12:03:05.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-see-programming-libs.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5.3.�Modules that require system libraries</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-see-programming.html" title="Chapter�5.�Programming notes"><link rel="prev" href="mwg-see-programming-syslog.html" title="5.2.�Use of syslog(3)"><link rel="next" href="mwg-example.html" title="Chapter�6.�An example module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5.3.�Modules that require system libraries</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-see-programming-syslog.html">Prev</a>�</td><th width="60%" align="center">Chapter�5.�Programming notes</th><td width="20%" align="right">�<a accesskey="n" href="mwg-example.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-see-programming-libs"></a>5.3.�Modules that require system libraries</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5.3.�Modules that require system libraries</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-see-programming.html" title="Chapter�5.�Programming notes"><link rel="prev" href="mwg-see-programming-syslog.html" title="5.2.�Use of syslog(3)"><link rel="next" href="mwg-example.html" title="Chapter�6.�An example module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5.3.�Modules that require system libraries</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-see-programming-syslog.html">Prev</a>�</td><th width="60%" align="center">Chapter�5.�Programming notes</th><td width="20%" align="right">�<a accesskey="n" href="mwg-example.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-see-programming-libs"></a>5.3.�Modules that require system libraries</h2></div></div></div><p> Writing a module is much like writing an application. You have to provide the "conventional hooks" for it to work correctly, like <code class="function">pam_sm_authenticate()</code> @@ -11,7 +11,7 @@ <em class="parameter"><code>-l</code></em><span class="emphasis"><em>XXX</em></span> arguments for the desired libraries when you create the shared module object. To make sure a module is linked to the - <span><strong class="command">libwhatever.so</strong></span> library + <span class="command"><strong>libwhatever.so</strong></span> library when it is <code class="function">dlopen()</code>ed, try: </p><pre class="programlisting"> % gcc -shared -o pam_module.so pam_module.o -lwhatever diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-see-programming-sec.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-see-programming-sec.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-see-programming-sec.html 2007-07-10 12:03:05.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-see-programming-sec.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5.1.�Security issues for module creation</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-see-programming.html" title="Chapter�5.�Programming notes"><link rel="prev" href="mwg-see-programming.html" title="Chapter�5.�Programming notes"><link rel="next" href="mwg-see-programming-syslog.html" title="5.2.�Use of syslog(3)"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5.1.�Security issues for module creation</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-see-programming.html">Prev</a>�</td><th width="60%" align="center">Chapter�5.�Programming notes</th><td width="20%" align="right">�<a accesskey="n" href="mwg-see-programming-syslog.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-see-programming-sec"></a>5.1.�Security issues for module creation</h2></div></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="mwg-see-programming-sec-res"></a>5.1.1.�Sufficient resources</h3></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5.1.�Security issues for module creation</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-see-programming.html" title="Chapter�5.�Programming notes"><link rel="prev" href="mwg-see-programming.html" title="Chapter�5.�Programming notes"><link rel="next" href="mwg-see-programming-syslog.html" title="5.2.�Use of syslog(3)"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5.1.�Security issues for module creation</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-see-programming.html">Prev</a>�</td><th width="60%" align="center">Chapter�5.�Programming notes</th><td width="20%" align="right">�<a accesskey="n" href="mwg-see-programming-syslog.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-see-programming-sec"></a>5.1.�Security issues for module creation</h2></div></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="mwg-see-programming-sec-res"></a>5.1.1.�Sufficient resources</h3></div></div></div><p> Care should be taken to ensure that the proper execution of a module is not compromised by a lack of system resources. If a module is unable to open sufficient files to perform its @@ -15,11 +15,11 @@ </p><p> In other words, user X runs a program that is setuid-Y, it grants the user to have the permissions of Z. A specific example - of this sort of service request is the <span><strong class="command">su</strong></span> - program: user <span><strong class="command">joe</strong></span> executes - <span><strong class="command">su</strong></span> to become the user <span><strong class="command">jane</strong></span>. - In this situation X=<span><strong class="command">joe</strong></span>, Y=<span><strong class="command">root</strong></span> - and Z=<span><strong class="command">jane</strong></span>. Clearly, it is important that + of this sort of service request is the <span class="command"><strong>su</strong></span> + program: user <span class="command"><strong>joe</strong></span> executes + <span class="command"><strong>su</strong></span> to become the user <span class="command"><strong>jane</strong></span>. + In this situation X=<span class="command"><strong>joe</strong></span>, Y=<span class="command"><strong>root</strong></span> + and Z=<span class="command"><strong>jane</strong></span>. Clearly, it is important that the module does not confuse these different users and grant an inappropriate level of privilege. </p><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-see-programming-syslog.html new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-see-programming-syslog.html --- old/Linux-PAM-0.99.8.1/doc/mwg/html/mwg-see-programming-syslog.html 2007-07-10 12:03:05.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/html/mwg-see-programming-syslog.html 2007-10-01 12:18:12.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5.2.�Use of syslog(3)</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-see-programming.html" title="Chapter�5.�Programming notes"><link rel="prev" href="mwg-see-programming-sec.html" title="5.1.�Security issues for module creation"><link rel="next" href="mwg-see-programming-libs.html" title="5.3.�Modules that require system libraries"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5.2.�Use of <span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-see-programming-sec.html">Prev</a>�</td><th width="60%" align="center">Chapter�5.�Programming notes</th><td width="20%" align="right">�<a accesskey="n" href="mwg-see-programming-libs.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-see-programming-syslog"></a>5.2.�Use of <span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5.2.�Use of syslog(3)</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_MWG.html" title="The Linux-PAM Module Writers' Guide"><link rel="up" href="mwg-see-programming.html" title="Chapter�5.�Programming notes"><link rel="prev" href="mwg-see-programming-sec.html" title="5.1.�Security issues for module creation"><link rel="next" href="mwg-see-programming-libs.html" title="5.3.�Modules that require system libraries"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5.2.�Use of <span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></th></tr><tr><td width="20%" align="left"><a accesskey="p" href="mwg-see-programming-sec.html">Prev</a>�</td><th width="60%" align="center">Chapter�5.�Programming notes</th><td width="20%" align="right">�<a accesskey="n" href="mwg-see-programming-libs.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mwg-see-programming-syslog"></a>5.2.�Use of <span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></h2></div></div></div><p> Only rarely should error information be directed to the user. Usually, this is to be limited to “<span class="quote"><span class="emphasis"><em>sorry you cannot login now</em></span></span>” @@ -20,7 +20,7 @@ <span class="emphasis"><em>LOG_ERR</em></span> level. </p></li><li><p> Debugging information, as activated by the - <span><strong class="command">debug</strong></span> argument to the module in + <span class="command"><strong>debug</strong></span> argument to the module in <code class="filename">/etc/pam.conf</code>, should be logged at the <span class="emphasis"><em>LOG_DEBUG</em></span> level. </p></li><li><p> Files old/Linux-PAM-0.99.8.1/doc/mwg/Linux-PAM_MWG.pdf and new/Linux-PAM-0.99.9.0/doc/mwg/Linux-PAM_MWG.pdf differ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/mwg/Linux-PAM_MWG.txt new/Linux-PAM-0.99.9.0/doc/mwg/Linux-PAM_MWG.txt --- old/Linux-PAM-0.99.8.1/doc/mwg/Linux-PAM_MWG.txt 2007-07-10 12:02:58.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/mwg/Linux-PAM_MWG.txt 2007-10-01 12:18:04.000000000 +0200 @@ -665,6 +665,9 @@ Without an '=' the pam_putenv() function will delete the corresponding variable from the PAM environment. +pam_putenv() operates on a copy of name_value, which means in contrast to +putenv(3), the application is responsible to free the data. + 2.1.7.2. RETURN VALUES PAM_PERM_DENIED diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/Linux-PAM_SAG.html new/Linux-PAM-0.99.9.0/doc/sag/html/Linux-PAM_SAG.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/Linux-PAM_SAG.html 2007-07-10 12:01:47.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/Linux-PAM_SAG.html 2007-10-01 12:17:01.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>The Linux-PAM System Administrators' Guide</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><meta name="description" content="This manual documents what a system-administrator needs to know about the Linux-PAM library. It covers the correct syntax of the PAM configuration file and discusses strategies for maintaining a secure system."><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="next" href="sag-introductoin.html" title="Chapter�1.�Introduction"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">The Linux-PAM System Administrators' Guide</th></tr><tr><td width="20%" align="left">�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-introductoin.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="sag"></a>The Linux-PAM System Administrators' Guide</h1></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Andrew G.</span> <span class="surname">Morgan</span></h3><code class="email"><<a href="mailto:morgan@kernel.org">morgan@kernel.org</a>></code></div><div class="author"><h3 class="author"><span class="firstname">Thorsten</span> <span class="surname">Kukuk</span></h3><code class="email"><<a href="mailto:kukuk@thkukuk.de">kukuk@thkukuk.de</a>></code></div></div></div><div><p class="releaseinfo">Version 0.99.7.0, 16. January 2007</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>The Linux-PAM System Administrators' Guide</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><meta name="description" content="This manual documents what a system-administrator needs to know about the Linux-PAM library. It covers the correct syntax of the PAM configuration file and discusses strategies for maintaining a secure system."><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="next" href="sag-introductoin.html" title="Chapter�1.�Introduction"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">The Linux-PAM System Administrators' Guide</th></tr><tr><td width="20%" align="left">�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-introductoin.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="sag"></a>The Linux-PAM System Administrators' Guide</h1></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Andrew G.</span> <span class="surname">Morgan</span></h3><code class="email"><<a class="email" href="mailto:morgan@kernel.org">morgan@kernel.org</a>></code></div><div class="author"><h3 class="author"><span class="firstname">Thorsten</span> <span class="surname">Kukuk</span></h3><code class="email"><<a class="email" href="mailto:kukuk@thkukuk.de">kukuk@thkukuk.de</a>></code></div></div></div><div><p class="releaseinfo">Version 0.99.7.0, 16. January 2007</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p> This manual documents what a system-administrator needs to know about the <span class="emphasis"><em>Linux-PAM</em></span> library. It covers the correct syntax of the PAM configuration file and discusses strategies diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-author.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-author.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-author.html 2007-07-10 12:01:47.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-author.html 2007-10-01 12:17:01.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�8.�Author/acknowledgments</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-see-also.html" title="Chapter�7.�See also"><link rel="next" href="sag-copyright.html" title="Chapter�9.�Copyright information for this document"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�8.�Author/acknowledgments</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-see-also.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-copyright.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-author"></a>Chapter�8.�Author/acknowledgments</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�8.�Author/acknowledgments</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-see-also.html" title="Chapter�7.�See also"><link rel="next" href="sag-copyright.html" title="Chapter�9.�Copyright information for this document"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�8.�Author/acknowledgments</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-see-also.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-copyright.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-author"></a>Chapter�8.�Author/acknowledgments</h2></div></div></div><p> This document was written by Andrew G. Morgan (morgan@kernel.org) with many contributions from Chris Adams, Peter Allgeyer, Tim Baverstock, Tim Berger, diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-configuratin-dirctory.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-configuratin-dirctory.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-configuratin-dirctory.html 2007-07-10 12:01:41.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-configuratin-dirctory.html 2007-10-01 12:16:54.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.2.�Directory based configuration</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-configuration.html" title="Chapter�4.�The Linux-PAM configuration file"><link rel="prev" href="sag-configuration-file.html" title="4.1.�Configuration file syntax"><link rel="next" href="sag-configuration-example.html" title="4.3.�Example configuration file entries"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.2.�Directory based configuration</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-configuration-file.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.�The Linux-PAM configuration file</th><td width="20%" align="right">�<a accesskey="n" href="sag-configuration-example.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-configuratin-dirctory"></a>4.2.�Directory based configuration</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.2.�Directory based configuration</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-configuration.html" title="Chapter�4.�The Linux-PAM configuration file"><link rel="prev" href="sag-configuration-file.html" title="4.1.�Configuration file syntax"><link rel="next" href="sag-configuration-example.html" title="4.3.�Example configuration file entries"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.2.�Directory based configuration</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-configuration-file.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.�The Linux-PAM configuration file</th><td width="20%" align="right">�<a accesskey="n" href="sag-configuration-example.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-configuratin-dirctory"></a>4.2.�Directory based configuration</h2></div></div></div><p> More flexible than the single configuration file is it to configure libpam via the contents of the <code class="filename">/etc/pam.d/</code> directory. In this case the diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-configuration-example.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-configuration-example.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-configuration-example.html 2007-07-10 12:01:42.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-configuration-example.html 2007-10-01 12:16:54.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.3.�Example configuration file entries</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-configuration.html" title="Chapter�4.�The Linux-PAM configuration file"><link rel="prev" href="sag-configuratin-dirctory.html" title="4.2.�Directory based configuration"><link rel="next" href="sag-security-issues.html" title="Chapter�5.�Security issues"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.3.�Example configuration file entries</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-configuratin-dirctory.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.�The Linux-PAM configuration file</th><td width="20%" align="right">�<a accesskey="n" href="sag-security-issues.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-configuration-example"></a>4.3.�Example configuration file entries</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.3.�Example configuration file entries</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-configuration.html" title="Chapter�4.�The Linux-PAM configuration file"><link rel="prev" href="sag-configuratin-dirctory.html" title="4.2.�Directory based configuration"><link rel="next" href="sag-security-issues.html" title="Chapter�5.�Security issues"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.3.�Example configuration file entries</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-configuratin-dirctory.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.�The Linux-PAM configuration file</th><td width="20%" align="right">�<a accesskey="n" href="sag-security-issues.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-configuration-example"></a>4.3.�Example configuration file entries</h2></div></div></div><p> In this section, we give some examples of entries that can be present in the <span class="emphasis"><em>Linux-PAM</em></span> configuration file. As a first attempt at configuring your @@ -22,8 +22,8 @@ a system is vulnerable to locking everyone out should the rest of the file become badly written. </p><p> - The module <span><strong class="command">pam_deny</strong></span> (documented in a - <a href="sag-pam_deny.html" title="6.4.�pam_deny - locking-out PAM module">later section</a>) is not very + The module <span class="command"><strong>pam_deny</strong></span> (documented in a + <a class="link" href="sag-pam_deny.html" title="6.4.�pam_deny - locking-out PAM module">later section</a>) is not very sophisticated. For example, it logs no information when it is invoked so unless the users of a system contact the administrator when failing to execute a service application, @@ -39,7 +39,7 @@ other auth required pam_warn.so other password required pam_warn.so </pre><p> - Having two '<span><strong class="command">other auth</strong></span>' lines is an + Having two '<span class="command"><strong>other auth</strong></span>' lines is an example of stacking. </p><p> On a system that uses the <code class="filename">/etc/pam.d/</code> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-configuration-file.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-configuration-file.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-configuration-file.html 2007-07-10 12:01:41.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-configuration-file.html 2007-10-01 12:16:54.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.1.�Configuration file syntax</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-configuration.html" title="Chapter�4.�The Linux-PAM configuration file"><link rel="prev" href="sag-configuration.html" title="Chapter�4.�The Linux-PAM configuration file"><link rel="next" href="sag-configuratin-dirctory.html" title="4.2.�Directory based configuration"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.1.�Configuration file syntax</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-configuration.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.�The Linux-PAM configuration file</th><td width="20%" align="right">�<a accesskey="n" href="sag-configuratin-dirctory.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-configuration-file"></a>4.1.�Configuration file syntax</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4.1.�Configuration file syntax</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-configuration.html" title="Chapter�4.�The Linux-PAM configuration file"><link rel="prev" href="sag-configuration.html" title="Chapter�4.�The Linux-PAM configuration file"><link rel="next" href="sag-configuratin-dirctory.html" title="4.2.�Directory based configuration"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4.1.�Configuration file syntax</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-configuration.html">Prev</a>�</td><th width="60%" align="center">Chapter�4.�The Linux-PAM configuration file</th><td width="20%" align="right">�<a accesskey="n" href="sag-configuratin-dirctory.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-configuration-file"></a>4.1.�Configuration file syntax</h2></div></div></div><p> The syntax of the <code class="filename">/etc/pam.conf</code> configuration file is as follows. The file is made up of a list of rules, each rule is typically placed on a single line, @@ -127,7 +127,8 @@ <span class="emphasis"><em>authtok_disable_aging</em></span>, <span class="emphasis"><em>try_again</em></span>, <span class="emphasis"><em>ignore</em></span>, <span class="emphasis"><em>abort</em></span>, <span class="emphasis"><em>authtok_expired</em></span>, - <span class="emphasis"><em>module_unknown</em></span>, <span class="emphasis"><em>bad_item</em></span> + <span class="emphasis"><em>module_unknown</em></span>, <span class="emphasis"><em>bad_item</em></span>, + <span class="emphasis"><em>conv_again</em></span>, <span class="emphasis"><em>incomplete</em></span>, and <span class="emphasis"><em>default</em></span>. </p><p> The last of these, <span class="emphasis"><em>default</em></span>, implies 'all @@ -136,7 +137,7 @@ <code class="filename">/usr/include/security/_pam_types.h</code>. The <span class="emphasis"><em>actionN</em></span> can be: an unsigned integer, <span class="emphasis"><em>n</em></span>, signifying an action of 'jump over the - next <span class="emphasis"><em>n</em></span> modules in the stack', or take one + next <span class="emphasis"><em>n</em></span> modules in the stack'; or take one of the following forms: </p><div class="variablelist"><dl><dt><span class="term">ignore</span></dt><dd><p> when used with a stack of modules, the module's return @@ -198,7 +199,7 @@ When using this convention, you can include `[' characters inside the string, and if you wish to include a `]' character inside the string that will survive the argument parsing, you - should use `\['. In other words: + should use `\]'. In other words: </p><pre class="programlisting"> [..[..\]..] --> ..[..].. </pre><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-configuration.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-configuration.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-configuration.html 2007-07-10 12:01:42.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-configuration.html 2007-10-01 12:16:54.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�4.�The Linux-PAM configuration file</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-overview.html" title="Chapter�3.�Overview"><link rel="next" href="sag-configuration-file.html" title="4.1.�Configuration file syntax"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�4.�The Linux-PAM configuration file</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-overview.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-configuration-file.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-configuration"></a>Chapter�4.�The Linux-PAM configuration file</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="sag-configuration-file.html">4.1. Configuration file syntax</a></span></dt><dt><span class="section"><a href="sag-configuratin-dirctory.html">4.2. Directory based configuration</a></span></dt><dt><span class="section"><a href="sag-configuration-example.html">4.3. Example configuration file entries</a></span></dt></dl></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�4.�The Linux-PAM configuration file</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-overview.html" title="Chapter�3.�Overview"><link rel="next" href="sag-configuration-file.html" title="4.1.�Configuration file syntax"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�4.�The Linux-PAM configuration file</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-overview.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-configuration-file.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-configuration"></a>Chapter�4.�The Linux-PAM configuration file</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="sag-configuration-file.html">4.1. Configuration file syntax</a></span></dt><dt><span class="section"><a href="sag-configuratin-dirctory.html">4.2. Directory based configuration</a></span></dt><dt><span class="section"><a href="sag-configuration-example.html">4.3. Example configuration file entries</a></span></dt></dl></div><p> When a <span class="emphasis"><em>PAM</em></span> aware privilege granting application is started, it activates its attachment to the PAM-API. This activation performs a number of tasks, the most important being the diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-copyright.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-copyright.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-copyright.html 2007-07-10 12:01:47.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-copyright.html 2007-10-01 12:17:01.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�9.�Copyright information for this document</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-author.html" title="Chapter�8.�Author/acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�9.�Copyright information for this document</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-author.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�</td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-copyright"></a>Chapter�9.�Copyright information for this document</h2></div></div></div><pre class="programlisting"> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�9.�Copyright information for this document</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-author.html" title="Chapter�8.�Author/acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�9.�Copyright information for this document</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-author.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�</td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-copyright"></a>Chapter�9.�Copyright information for this document</h2></div></div></div><pre class="programlisting"> Copyright (c) 2006 Thorsten Kukuk <kukuk@thkukuk.de> Copyright (c) 1996-2002 Andrew G. Morgan <morgan@kernel.org> </pre><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-introductoin.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-introductoin.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-introductoin.html 2007-07-10 12:01:41.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-introductoin.html 2007-10-01 12:16:54.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�1.�Introduction</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="next" href="sag-text-conventions.html" title="Chapter�2.�Some comments on the text"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�1.�Introduction</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Linux-PAM_SAG.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-text-conventions.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-introductoin"></a>Chapter�1.�Introduction</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�1.�Introduction</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="next" href="sag-text-conventions.html" title="Chapter�2.�Some comments on the text"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�1.�Introduction</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Linux-PAM_SAG.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-text-conventions.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-introductoin"></a>Chapter�1.�Introduction</h2></div></div></div><p> <span class="emphasis"><em>Linux-PAM</em></span> (Pluggable Authentication Modules for Linux) is a suite of shared libraries that enable the local system administrator to choose how applications authenticate users. diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-module-reference.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-module-reference.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-module-reference.html 2007-07-10 12:01:47.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-module-reference.html 2007-10-01 12:17:01.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�6.�A reference guide for available modules</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-security-issues-other.html" title="5.2.�Avoid having a weak `other' configuration"><link rel="next" href="sag-pam_access.html" title="6.1.�pam_access - logdaemon style login access control"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�6.�A reference guide for available modules</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-security-issues-other.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_access.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-module-reference"></a>Chapter�6.�A reference guide for available modules</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="sag-pam_access.html">6.1. pam_access - logdaemon style login access control</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_access.html#sag-pam_access-description">6.1.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-access.conf-description">6.1.2. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-pam_access-options">6.1.3. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-pam_access-services">6.1.4. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-pam_access-return_values">6.1.5. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-pam_access-files">6.1.6. FILES</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-access.conf-examples">6.1.7. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-pam_access-authors">6.1.8. AUTHORS</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_cracklib.html">6.2. pam_cracklib - checks the password against dictionary words</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_cracklib.html#sag-pam_cracklib-description">6.2.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_cracklib.html#sag-pam_cracklib-options">6.2.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_cracklib.html#sag-pam_cracklib-services">6.2.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_cracklib.html#sag-pam_cracklib-return_values">6.2.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_cracklib.html#sag-pam_cracklib-examples">6.2.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_cracklib.html#sag-pam_cracklib-author">6.2.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_debug.html">6.3. pam_debug - debug the PAM stack</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_debug.html#sag-pam_debug-description">6.3.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_debug.html#sag-pam_debug-options">6.3.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_debug.html#sag-pam_debug-services">6.3.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_debug.html#sag-pam_debug-return_values">6.3.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_debug.html#sag-pam_debug-examples">6.3.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_debug.html#sag-pam_debug-author">6.3.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_deny.html">6.4. pam_deny - locking-out PAM module</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_deny.html#sag-pam_deny-description">6.4.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_deny.html#sag-pam_deny-options">6.4.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_deny.html#sag-pam_deny-services">6.4.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_deny.html#sag-pam_deny-return_values">6.4.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_deny.html#sag-pam_deny-examples">6.4.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_deny.html#sag-pam_deny-author">6.4.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_echo.html">6.5. pam_echo - print text messages</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_echo.html#sag-pam_echo-description">6.5.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_echo.html#sag-pam_echo-options">6.5.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_echo.html#sag-pam_echo-services">6.5.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_echo.html#sag-pam_echo-return_values">6.5.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_echo.html#sag-pam_echo-examples">6.5.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_echo.html#sag-pam_echo-author">6.5.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_env.html">6.6. pam_env - set/unset environment variables</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env-description">6.6.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env.conf-description">6.6.2. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env-options">6.6.3. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env-services">6.6.4. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env-return_values">6.6.5. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env-files">6.6.6. FILES</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env.conf-examples">6.6.7. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env-authors">6.6.8. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_exec.html">6.7. pam_exec - call an external command</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_exec.html#sag-pam_exec-description">6.7.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_exec.html#sag-pam_exec-options">6.7.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_exec.html#sag-pam_exec-services">6.7.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_exec.html#sag-pam_exec-return_values">6.7.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_exec.html#sag-pam_exec-examples">6.7.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_exec.html#sag-pam_exec-author">6.7.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_faildelay.html">6.8. pam_faildelay - change the delay on failure per-application</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_faildelay.html#sag-pam_faildelay-description">6.8.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_faildelay.html#sag-pam_faildelay-options">6.8.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_faildelay.html#sag-pam_faildelay-services">6.8.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_faildelay.html#sag-pam_faildelay-return_values">6.8.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_faildelay.html#sag-pam_faildelay-examples">6.8.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_faildelay.html#sag-pam_faildelay-author">6.8.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_filter.html">6.9. pam_filter - filter module</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_filter.html#sag-pam_filter-description">6.9.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_filter.html#sag-pam_filter-options">6.9.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_filter.html#sag-pam_filter-services">6.9.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_filter.html#sag-pam_filter-return_values">6.9.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_filter.html#sag-pam_filter-examples">6.9.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_filter.html#sag-pam_filter-author">6.9.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_ftp.html">6.10. pam_ftp - module for anonymous access</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_ftp.html#sag-pam_ftp-description">6.10.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_ftp.html#sag-pam_ftp-options">6.10.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_ftp.html#sag-pam_ftp-services">6.10.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_ftp.html#sag-pam_ftp-return_values">6.10.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_ftp.html#sag-pam_ftp-examples">6.10.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_ftp.html#sag-pam_ftp-author">6.10.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_group.html">6.11. pam_group - module to modify group access</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_group.html#sag-pam_group-description">6.11.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-group.conf-description">6.11.2. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-pam_group-options">6.11.3. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-pam_group-services">6.11.4. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-pam_group-return_values">6.11.5. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-pam_group-files">6.11.6. FILES</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-group.conf-examples">6.11.7. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-pam_group-authors">6.11.8. AUTHORS</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_issue.html">6.12. pam_issue - add issue file to user prompt</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_issue.html#sag-pam_issue-description">6.12.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_issue.html#sag-pam_issue-options">6.12.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_issue.html#sag-pam_issue-services">6.12.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_issue.html#sag-pam_issue-return_values">6.12.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_issue.html#sag-pam_issue-examples">6.12.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_issue.html#sag-pam_issue-author">6.12.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_keyinit.html">6.13. pam_keyinit - display the keyinit file</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_keyinit.html#sag-pam_keyinit-description">6.13.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_keyinit.html#sag-pam_keyinit-options">6.13.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_keyinit.html#sag-pam_keyinit-services">6.13.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_keyinit.html#sag-pam_keyinit-return_values">6.13.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_keyinit.html#sag-pam_keyinit-examples">6.13.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_keyinit.html#sag-pam_keyinit-author">6.13.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_lastlog.html">6.14. pam_lastlog - display date of last login</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_lastlog.html#sag-pam_lastlog-description">6.14.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_lastlog.html#sag-pam_lastlog-options">6.14.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_lastlog.html#sag-pam_lastlog-services">6.14.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_lastlog.html#sag-pam_lastlog-return_values">6.14.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_lastlog.html#sag-pam_lastlog-examples">6.14.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_lastlog.html#sag-pam_lastlog-author">6.14.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_limits.html">6.15. pam_limits - limit resources</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_limits.html#sag-pam_limits-description">6.15.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-limits.conf-description">6.15.2. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-pam_limits-options">6.15.3. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-pam_limits-services">6.15.4. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-pam_limits-return_values">6.15.5. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-pam_limits-files">6.15.6. FILES</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-limits.conf-examples">6.15.7. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-pam_limits-authors">6.15.8. AUTHORS</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_listfile.html">6.16. pam_listfile - deny or allow services based on an arbitrary file</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_listfile.html#sag-pam_listfile-description">6.16.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_listfile.html#sag-pam_listfile-options">6.16.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_listfile.html#sag-pam_listfile-services">6.16.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_listfile.html#sag-pam_listfile-return_values">6.16.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_listfile.html#sag-pam_listfile-examples">6.16.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_listfile.html#sag-pam_listfile-author">6.16.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_localuser.html">6.17. pam_localuser - require users to be listed in /etc/passwd</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_localuser.html#sag-pam_localuser-description">6.17.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_localuser.html#sag-pam_localuser-options">6.17.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_localuser.html#sag-pam_localuser-services">6.17.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_localuser.html#sag-pam_localuser-return_values">6.17.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_localuser.html#sag-pam_localuser-examples">6.17.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_localuser.html#sag-pam_localuser-author">6.17.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_loginuid.html">6.18. pam_loginuid - record user's login uid to the process attribute</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_loginuid.html#sag-pam_loginuid-description">6.18.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_loginuid.html#sag-pam_loginuid-options">6.18.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_loginuid.html#sag-pam_loginuid-services">6.18.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_loginuid.html#sag-pam_loginuid-return_values">6.18.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_loginuid.html#sag-pam_loginuid-examples">6.18.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_loginuid.html#sag-pam_loginuid-author">6.18.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_mail.html">6.19. pam_mail - inform about available mail</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_mail.html#sag-pam_mail-description">6.19.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_mail.html#sag-pam_mail-options">6.19.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_mail.html#sag-pam_mail-services">6.19.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_mail.html#sag-pam_mail-return_values">6.19.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_mail.html#sag-pam_mail-examples">6.19.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_mail.html#sag-pam_mail-author">6.19.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_mkhomedir.html">6.20. pam_mkhomedir - create users home directory</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_mkhomedir.html#sag-pam_mkhomedir-description">6.20.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_mkhomedir.html#sag-pam_mkhomedir-options">6.20.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_mkhomedir.html#sag-pam_mkhomedir-services">6.20.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_mkhomedir.html#sag-pam_mkhomedir-return_values">6.20.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_mkhomedir.html#sag-pam_mkhomedir-examples">6.20.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_mkhomedir.html#sag-pam_mkhomedir-author">6.20.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_motd.html">6.21. pam_motd - display the motd file</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_motd.html#sag-pam_motd-description">6.21.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_motd.html#sag-pam_motd-options">6.21.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_motd.html#sag-pam_motd-services">6.21.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_motd.html#sag-pam_motd-return_values">6.21.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_motd.html#sag-pam_motd-examples">6.21.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_motd.html#sag-pam_motd-author">6.21.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_namespace.html">6.22. pam_namespace - setup a private namespace</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_namespace.html#sag-pam_namespace-description">6.22.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-namespace.conf-description">6.22.2. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-pam_namespace-options">6.22.3. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-pam_namespace-services">6.22.4. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-pam_namespace-return_values">6.22.5. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-pam_namespace-files">6.22.6. FILES</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-namespace.conf-examples">6.22.7. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-pam_namespace-authors">6.22.8. AUTHORS</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_nologin.html">6.23. pam_nologin - prevent non-root users from login</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_nologin.html#sag-pam_nologin-description">6.23.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_nologin.html#sag-pam_nologin-options">6.23.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_nologin.html#sag-pam_nologin-services">6.23.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_nologin.html#sag-pam_nologin-return_values">6.23.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_nologin.html#sag-pam_nologin-examples">6.23.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_nologin.html#sag-pam_nologin-author">6.23.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_permit.html">6.24. pam_permit - the promiscuous module</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_permit.html#sag-pam_permit-description">6.24.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_permit.html#sag-pam_permit-options">6.24.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_permit.html#sag-pam_permit-services">6.24.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_permit.html#sag-pam_permit-return_values">6.24.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_permit.html#sag-pam_permit-examples">6.24.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_permit.html#sag-pam_permit-author">6.24.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_rhosts.html">6.25. pam_rhosts - grant access using .rhosts file</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_rhosts.html#sag-pam_rhosts-description">6.25.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_rhosts.html#sag-pam_rhosts-options">6.25.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_rhosts.html#sag-pam_rhosts-services">6.25.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_rhosts.html#sag-pam_rhosts-return_values">6.25.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_rhosts.html#sag-pam_rhosts-examples">6.25.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_rhosts.html#sag-pam_rhosts-author">6.25.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_rootok.html">6.26. pam_rootok - gain only root access</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_rootok.html#sag-pam_rootok-description">6.26.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_rootok.html#sag-pam_rootok-options">6.26.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_rootok.html#sag-pam_rootok-services">6.26.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_rootok.html#sag-pam_rootok-return_values">6.26.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_rootok.html#sag-pam_rootok-examples">6.26.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_rootok.html#sag-pam_rootok-author">6.26.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_securetty.html">6.27. pam_securetty - limit root login to special devices</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_securetty.html#sag-pam_securetty-description">6.27.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_securetty.html#sag-pam_securetty-options">6.27.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_securetty.html#sag-pam_securetty-services">6.27.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_securetty.html#sag-pam_securetty-return_values">6.27.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_securetty.html#sag-pam_securetty-examples">6.27.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_securetty.html#sag-pam_securetty-author">6.27.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_selinux.html">6.28. pam_selinux - set the default security context</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_selinux.html#sag-pam_selinux-description">6.28.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_selinux.html#sag-pam_selinux-options">6.28.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_selinux.html#sag-pam_selinux-services">6.28.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_selinux.html#sag-pam_selinux-return_values">6.28.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_selinux.html#sag-pam_selinux-examples">6.28.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_selinux.html#sag-pam_selinux-author">6.28.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_shells.html">6.29. pam_shells - check for valid login shell</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_shells.html#sag-pam_shells-description">6.29.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_shells.html#sag-pam_shells-options">6.29.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_shells.html#sag-pam_shells-services">6.29.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_shells.html#sag-pam_shells-return_values">6.29.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_shells.html#sag-pam_shells-examples">6.29.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_shells.html#sag-pam_shells-author">6.29.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_succeed_if.html">6.30. pam_succeed_if - test account characteristics</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_succeed_if.html#sag-pam_succeed_if-description">6.30.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_succeed_if.html#sag-pam_succeed_if-options">6.30.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_succeed_if.html#sag-pam_succeed_if-services">6.30.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_succeed_if.html#sag-pam_succeed_if-return_values">6.30.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_succeed_if.html#sag-pam_succeed_if-examples">6.30.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_succeed_if.html#sag-pam_succeed_if-author">6.30.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_tally.html">6.31. pam_tally - login counter (tallying) module</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_tally.html#sag-pam_tally-description">6.31.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_tally.html#sag-pam_tally-options">6.31.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_tally.html#sag-pam_tally-services">6.31.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_tally.html#sag-pam_tally-return_values">6.31.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_tally.html#sag-pam_tally-examples">6.31.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_tally.html#sag-pam_tally-author">6.31.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_time.html">6.32. pam_time - time controled access</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_time.html#sag-pam_time-description">6.32.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-time.conf-description">6.32.2. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-pam_time-options">6.32.3. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-pam_time-services">6.32.4. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-pam_time-return_values">6.32.5. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-pam_time-files">6.32.6. FILES</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-time.conf-examples">6.32.7. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-pam_time-authors">6.32.8. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_umask.html">6.33. pam_umask - set the file mode creation mask</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_umask.html#sag-pam_umask-description">6.33.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_umask.html#sag-pam_umask-options">6.33.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_umask.html#sag-pam_umask-services">6.33.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_umask.html#sag-pam_umask-return_values">6.33.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_umask.html#sag-pam_umask-examples">6.33.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_umask.html#sag-pam_umask-author">6.33.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_unix.html">6.34. pam_unix - traditional password authentication</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_unix.html#sag-pam_unix-description">6.34.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_unix.html#sag-pam_unix-options">6.34.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_unix.html#sag-pam_unix-services">6.34.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_unix.html#sag-pam_unix-return_values">6.34.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_unix.html#sag-pam_unix-examples">6.34.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_unix.html#sag-pam_unix-author">6.34.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_userdb.html">6.35. pam_userdb - authenticate against a db database</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_userdb.html#sag-pam_userdb-description">6.35.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_userdb.html#sag-pam_userdb-options">6.35.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_userdb.html#sag-pam_userdb-services">6.35.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_userdb.html#sag-pam_userdb-return_values">6.35.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_userdb.html#sag-pam_userdb-examples">6.35.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_userdb.html#sag-pam_userdb-author">6.35.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_warn.html">6.36. pam_warn - logs all PAM items</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_warn.html#sag-pam_warn-description">6.36.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_warn.html#sag-pam_warn-options">6.36.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_warn.html#sag-pam_warn-services">6.36.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_warn.html#sag-pam_warn-return_values">6.36.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_warn.html#sag-pam_warn-examples">6.36.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_warn.html#sag-pam_warn-author">6.36.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_wheel.html">6.37. pam_wheel - only permit root access to members of group wheel</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_wheel.html#sag-pam_wheel-description">6.37.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_wheel.html#sag-pam_wheel-options">6.37.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_wheel.html#sag-pam_wheel-services">6.37.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_wheel.html#sag-pam_wheel-return_values">6.37.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_wheel.html#sag-pam_wheel-examples">6.37.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_wheel.html#sag-pam_wheel-author">6.37.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_xauth.html">6.38. pam_xauth - forward xauth keys between users</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_xauth.html#sag-pam_xauth-description">6.38.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_xauth.html#sag-pam_xauth-options">6.38.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_xauth.html#sag-pam_xauth-services">6.38.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_xauth.html#sag-pam_xauth-return_values">6.38.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_xauth.html#sag-pam_xauth-examples">6.38.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_xauth.html#sag-pam_xauth-author">6.38.6. AUTHOR</a></span></dt></dl></dd></dl></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�6.�A reference guide for available modules</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-security-issues-other.html" title="5.2.�Avoid having a weak `other' configuration"><link rel="next" href="sag-pam_access.html" title="6.1.�pam_access - logdaemon style login access control"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�6.�A reference guide for available modules</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-security-issues-other.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_access.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-module-reference"></a>Chapter�6.�A reference guide for available modules</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="sag-pam_access.html">6.1. pam_access - logdaemon style login access control</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_access.html#sag-pam_access-description">6.1.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-access.conf-description">6.1.2. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-pam_access-options">6.1.3. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-pam_access-services">6.1.4. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-pam_access-return_values">6.1.5. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-pam_access-files">6.1.6. FILES</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-access.conf-examples">6.1.7. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_access.html#sag-pam_access-authors">6.1.8. AUTHORS</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_cracklib.html">6.2. pam_cracklib - checks the password against dictionary words</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_cracklib.html#sag-pam_cracklib-description">6.2.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_cracklib.html#sag-pam_cracklib-options">6.2.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_cracklib.html#sag-pam_cracklib-services">6.2.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_cracklib.html#sag-pam_cracklib-return_values">6.2.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_cracklib.html#sag-pam_cracklib-examples">6.2.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_cracklib.html#sag-pam_cracklib-author">6.2.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_debug.html">6.3. pam_debug - debug the PAM stack</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_debug.html#sag-pam_debug-description">6.3.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_debug.html#sag-pam_debug-options">6.3.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_debug.html#sag-pam_debug-services">6.3.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_debug.html#sag-pam_debug-return_values">6.3.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_debug.html#sag-pam_debug-examples">6.3.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_debug.html#sag-pam_debug-author">6.3.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_deny.html">6.4. pam_deny - locking-out PAM module</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_deny.html#sag-pam_deny-description">6.4.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_deny.html#sag-pam_deny-options">6.4.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_deny.html#sag-pam_deny-services">6.4.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_deny.html#sag-pam_deny-return_values">6.4.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_deny.html#sag-pam_deny-examples">6.4.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_deny.html#sag-pam_deny-author">6.4.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_echo.html">6.5. pam_echo - print text messages</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_echo.html#sag-pam_echo-description">6.5.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_echo.html#sag-pam_echo-options">6.5.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_echo.html#sag-pam_echo-services">6.5.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_echo.html#sag-pam_echo-return_values">6.5.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_echo.html#sag-pam_echo-examples">6.5.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_echo.html#sag-pam_echo-author">6.5.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_env.html">6.6. pam_env - set/unset environment variables</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env-description">6.6.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env.conf-description">6.6.2. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env-options">6.6.3. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env-services">6.6.4. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env-return_values">6.6.5. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env-files">6.6.6. FILES</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env.conf-examples">6.6.7. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_env.html#sag-pam_env-authors">6.6.8. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_exec.html">6.7. pam_exec - call an external command</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_exec.html#sag-pam_exec-description">6.7.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_exec.html#sag-pam_exec-options">6.7.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_exec.html#sag-pam_exec-services">6.7.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_exec.html#sag-pam_exec-return_values">6.7.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_exec.html#sag-pam_exec-examples">6.7.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_exec.html#sag-pam_exec-author">6.7.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_faildelay.html">6.8. pam_faildelay - change the delay on failure per-application</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_faildelay.html#sag-pam_faildelay-description">6.8.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_faildelay.html#sag-pam_faildelay-options">6.8.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_faildelay.html#sag-pam_faildelay-services">6.8.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_faildelay.html#sag-pam_faildelay-return_values">6.8.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_faildelay.html#sag-pam_faildelay-examples">6.8.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_faildelay.html#sag-pam_faildelay-author">6.8.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_filter.html">6.9. pam_filter - filter module</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_filter.html#sag-pam_filter-description">6.9.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_filter.html#sag-pam_filter-options">6.9.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_filter.html#sag-pam_filter-services">6.9.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_filter.html#sag-pam_filter-return_values">6.9.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_filter.html#sag-pam_filter-examples">6.9.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_filter.html#sag-pam_filter-author">6.9.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_ftp.html">6.10. pam_ftp - module for anonymous access</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_ftp.html#sag-pam_ftp-description">6.10.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_ftp.html#sag-pam_ftp-options">6.10.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_ftp.html#sag-pam_ftp-services">6.10.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_ftp.html#sag-pam_ftp-return_values">6.10.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_ftp.html#sag-pam_ftp-examples">6.10.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_ftp.html#sag-pam_ftp-author">6.10.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_group.html">6.11. pam_group - module to modify group access</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_group.html#sag-pam_group-description">6.11.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-group.conf-description">6.11.2. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-pam_group-options">6.11.3. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-pam_group-services">6.11.4. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-pam_group-return_values">6.11.5. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-pam_group-files">6.11.6. FILES</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-group.conf-examples">6.11.7. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_group.html#sag-pam_group-authors">6.11.8. AUTHORS</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_issue.html">6.12. pam_issue - add issue file to user prompt</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_issue.html#sag-pam_issue-description">6.12.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_issue.html#sag-pam_issue-options">6.12.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_issue.html#sag-pam_issue-services">6.12.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_issue.html#sag-pam_issue-return_values">6.12.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_issue.html#sag-pam_issue-examples">6.12.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_issue.html#sag-pam_issue-author">6.12.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_keyinit.html">6.13. pam_keyinit - display the keyinit file</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_keyinit.html#sag-pam_keyinit-description">6.13.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_keyinit.html#sag-pam_keyinit-options">6.13.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_keyinit.html#sag-pam_keyinit-services">6.13.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_keyinit.html#sag-pam_keyinit-return_values">6.13.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_keyinit.html#sag-pam_keyinit-examples">6.13.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_keyinit.html#sag-pam_keyinit-author">6.13.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_lastlog.html">6.14. pam_lastlog - display date of last login</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_lastlog.html#sag-pam_lastlog-description">6.14.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_lastlog.html#sag-pam_lastlog-options">6.14.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_lastlog.html#sag-pam_lastlog-services">6.14.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_lastlog.html#sag-pam_lastlog-return_values">6.14.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_lastlog.html#sag-pam_lastlog-examples">6.14.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_lastlog.html#sag-pam_lastlog-author">6.14.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_limits.html">6.15. pam_limits - limit resources</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_limits.html#sag-pam_limits-description">6.15.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-limits.conf-description">6.15.2. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-pam_limits-options">6.15.3. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-pam_limits-services">6.15.4. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-pam_limits-return_values">6.15.5. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-pam_limits-files">6.15.6. FILES</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-limits.conf-examples">6.15.7. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_limits.html#sag-pam_limits-authors">6.15.8. AUTHORS</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_listfile.html">6.16. pam_listfile - deny or allow services based on an arbitrary file</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_listfile.html#sag-pam_listfile-description">6.16.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_listfile.html#sag-pam_listfile-options">6.16.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_listfile.html#sag-pam_listfile-services">6.16.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_listfile.html#sag-pam_listfile-return_values">6.16.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_listfile.html#sag-pam_listfile-examples">6.16.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_listfile.html#sag-pam_listfile-author">6.16.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_localuser.html">6.17. pam_localuser - require users to be listed in /etc/passwd</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_localuser.html#sag-pam_localuser-description">6.17.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_localuser.html#sag-pam_localuser-options">6.17.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_localuser.html#sag-pam_localuser-services">6.17.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_localuser.html#sag-pam_localuser-return_values">6.17.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_localuser.html#sag-pam_localuser-examples">6.17.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_localuser.html#sag-pam_localuser-author">6.17.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_loginuid.html">6.18. pam_loginuid - record user's login uid to the process attribute</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_loginuid.html#sag-pam_loginuid-description">6.18.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_loginuid.html#sag-pam_loginuid-options">6.18.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_loginuid.html#sag-pam_loginuid-services">6.18.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_loginuid.html#sag-pam_loginuid-return_values">6.18.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_loginuid.html#sag-pam_loginuid-examples">6.18.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_loginuid.html#sag-pam_loginuid-author">6.18.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_mail.html">6.19. pam_mail - inform about available mail</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_mail.html#sag-pam_mail-description">6.19.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_mail.html#sag-pam_mail-options">6.19.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_mail.html#sag-pam_mail-services">6.19.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_mail.html#sag-pam_mail-return_values">6.19.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_mail.html#sag-pam_mail-examples">6.19.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_mail.html#sag-pam_mail-author">6.19.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_mkhomedir.html">6.20. pam_mkhomedir - create users home directory</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_mkhomedir.html#sag-pam_mkhomedir-description">6.20.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_mkhomedir.html#sag-pam_mkhomedir-options">6.20.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_mkhomedir.html#sag-pam_mkhomedir-services">6.20.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_mkhomedir.html#sag-pam_mkhomedir-return_values">6.20.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_mkhomedir.html#sag-pam_mkhomedir-examples">6.20.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_mkhomedir.html#sag-pam_mkhomedir-author">6.20.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_motd.html">6.21. pam_motd - display the motd file</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_motd.html#sag-pam_motd-description">6.21.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_motd.html#sag-pam_motd-options">6.21.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_motd.html#sag-pam_motd-services">6.21.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_motd.html#sag-pam_motd-return_values">6.21.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_motd.html#sag-pam_motd-examples">6.21.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_motd.html#sag-pam_motd-author">6.21.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_namespace.html">6.22. pam_namespace - setup a private namespace</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_namespace.html#sag-pam_namespace-description">6.22.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-namespace.conf-description">6.22.2. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-pam_namespace-options">6.22.3. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-pam_namespace-services">6.22.4. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-pam_namespace-return_values">6.22.5. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-pam_namespace-files">6.22.6. FILES</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-namespace.conf-examples">6.22.7. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_namespace.html#sag-pam_namespace-authors">6.22.8. AUTHORS</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_nologin.html">6.23. pam_nologin - prevent non-root users from login</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_nologin.html#sag-pam_nologin-description">6.23.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_nologin.html#sag-pam_nologin-options">6.23.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_nologin.html#sag-pam_nologin-services">6.23.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_nologin.html#sag-pam_nologin-return_values">6.23.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_nologin.html#sag-pam_nologin-examples">6.23.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_nologin.html#sag-pam_nologin-author">6.23.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_permit.html">6.24. pam_permit - the promiscuous module</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_permit.html#sag-pam_permit-description">6.24.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_permit.html#sag-pam_permit-options">6.24.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_permit.html#sag-pam_permit-services">6.24.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_permit.html#sag-pam_permit-return_values">6.24.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_permit.html#sag-pam_permit-examples">6.24.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_permit.html#sag-pam_permit-author">6.24.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_rhosts.html">6.25. pam_rhosts - grant access using .rhosts file</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_rhosts.html#sag-pam_rhosts-description">6.25.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_rhosts.html#sag-pam_rhosts-options">6.25.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_rhosts.html#sag-pam_rhosts-services">6.25.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_rhosts.html#sag-pam_rhosts-return_values">6.25.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_rhosts.html#sag-pam_rhosts-examples">6.25.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_rhosts.html#sag-pam_rhosts-author">6.25.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_rootok.html">6.26. pam_rootok - gain only root access</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_rootok.html#sag-pam_rootok-description">6.26.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_rootok.html#sag-pam_rootok-options">6.26.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_rootok.html#sag-pam_rootok-services">6.26.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_rootok.html#sag-pam_rootok-return_values">6.26.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_rootok.html#sag-pam_rootok-examples">6.26.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_rootok.html#sag-pam_rootok-author">6.26.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_securetty.html">6.27. pam_securetty - limit root login to special devices</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_securetty.html#sag-pam_securetty-description">6.27.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_securetty.html#sag-pam_securetty-options">6.27.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_securetty.html#sag-pam_securetty-services">6.27.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_securetty.html#sag-pam_securetty-return_values">6.27.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_securetty.html#sag-pam_securetty-examples">6.27.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_securetty.html#sag-pam_securetty-author">6.27.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_selinux.html">6.28. pam_selinux - set the default security context</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_selinux.html#sag-pam_selinux-description">6.28.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_selinux.html#sag-pam_selinux-options">6.28.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_selinux.html#sag-pam_selinux-services">6.28.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_selinux.html#sag-pam_selinux-return_values">6.28.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_selinux.html#sag-pam_selinux-examples">6.28.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_selinux.html#sag-pam_selinux-author">6.28.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_shells.html">6.29. pam_shells - check for valid login shell</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_shells.html#sag-pam_shells-description">6.29.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_shells.html#sag-pam_shells-options">6.29.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_shells.html#sag-pam_shells-services">6.29.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_shells.html#sag-pam_shells-return_values">6.29.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_shells.html#sag-pam_shells-examples">6.29.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_shells.html#sag-pam_shells-author">6.29.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_succeed_if.html">6.30. pam_succeed_if - test account characteristics</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_succeed_if.html#sag-pam_succeed_if-description">6.30.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_succeed_if.html#sag-pam_succeed_if-options">6.30.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_succeed_if.html#sag-pam_succeed_if-services">6.30.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_succeed_if.html#sag-pam_succeed_if-return_values">6.30.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_succeed_if.html#sag-pam_succeed_if-examples">6.30.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_succeed_if.html#sag-pam_succeed_if-author">6.30.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_tally.html">6.31. pam_tally - login counter (tallying) module</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_tally.html#sag-pam_tally-description">6.31.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_tally.html#sag-pam_tally-options">6.31.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_tally.html#sag-pam_tally-services">6.31.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_tally.html#sag-pam_tally-return_values">6.31.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_tally.html#sag-pam_tally-examples">6.31.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_tally.html#sag-pam_tally-author">6.31.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_time.html">6.32. pam_time - time controled access</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_time.html#sag-pam_time-description">6.32.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-time.conf-description">6.32.2. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-pam_time-options">6.32.3. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-pam_time-services">6.32.4. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-pam_time-return_values">6.32.5. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-pam_time-files">6.32.6. FILES</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-time.conf-examples">6.32.7. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_time.html#sag-pam_time-authors">6.32.8. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_umask.html">6.33. pam_umask - set the file mode creation mask</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_umask.html#sag-pam_umask-description">6.33.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_umask.html#sag-pam_umask-options">6.33.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_umask.html#sag-pam_umask-services">6.33.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_umask.html#sag-pam_umask-return_values">6.33.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_umask.html#sag-pam_umask-examples">6.33.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_umask.html#sag-pam_umask-author">6.33.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_unix.html">6.34. pam_unix - traditional password authentication</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_unix.html#sag-pam_unix-description">6.34.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_unix.html#sag-pam_unix-options">6.34.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_unix.html#sag-pam_unix-services">6.34.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_unix.html#sag-pam_unix-return_values">6.34.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_unix.html#sag-pam_unix-examples">6.34.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_unix.html#sag-pam_unix-author">6.34.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_userdb.html">6.35. pam_userdb - authenticate against a db database</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_userdb.html#sag-pam_userdb-description">6.35.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_userdb.html#sag-pam_userdb-options">6.35.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_userdb.html#sag-pam_userdb-services">6.35.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_userdb.html#sag-pam_userdb-return_values">6.35.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_userdb.html#sag-pam_userdb-examples">6.35.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_userdb.html#sag-pam_userdb-author">6.35.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_warn.html">6.36. pam_warn - logs all PAM items</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_warn.html#sag-pam_warn-description">6.36.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_warn.html#sag-pam_warn-options">6.36.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_warn.html#sag-pam_warn-services">6.36.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_warn.html#sag-pam_warn-return_values">6.36.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_warn.html#sag-pam_warn-examples">6.36.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_warn.html#sag-pam_warn-author">6.36.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_wheel.html">6.37. pam_wheel - only permit root access to members of group wheel</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_wheel.html#sag-pam_wheel-description">6.37.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_wheel.html#sag-pam_wheel-options">6.37.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_wheel.html#sag-pam_wheel-services">6.37.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_wheel.html#sag-pam_wheel-return_values">6.37.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_wheel.html#sag-pam_wheel-examples">6.37.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_wheel.html#sag-pam_wheel-author">6.37.6. AUTHOR</a></span></dt></dl></dd><dt><span class="section"><a href="sag-pam_xauth.html">6.38. pam_xauth - forward xauth keys between users</a></span></dt><dd><dl><dt><span class="section"><a href="sag-pam_xauth.html#sag-pam_xauth-description">6.38.1. DESCRIPTION</a></span></dt><dt><span class="section"><a href="sag-pam_xauth.html#sag-pam_xauth-options">6.38.2. OPTIONS</a></span></dt><dt><span class="section"><a href="sag-pam_xauth.html#sag-pam_xauth-services">6.38.3. MODULE SERVICES PROVIDED</a></span></dt><dt><span class="section"><a href="sag-pam_xauth.html#sag-pam_xauth-return_values">6.38.4. RETURN VALUES</a></span></dt><dt><span class="section"><a href="sag-pam_xauth.html#sag-pam_xauth-examples">6.38.5. EXAMPLES</a></span></dt><dt><span class="section"><a href="sag-pam_xauth.html#sag-pam_xauth-author">6.38.6. AUTHOR</a></span></dt></dl></dd></dl></div><p> Here, we collect together the descriptions of the various modules coming with Linux-PAM. </p></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="sag-security-issues-other.html">Prev</a>�</td><td width="20%" align="center">�</td><td width="40%" align="right">�<a accesskey="n" href="sag-pam_access.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">5.2.�Avoid having a weak `other' configuration�</td><td width="20%" align="center"><a accesskey="h" href="Linux-PAM_SAG.html">Home</a></td><td width="40%" align="right" valign="top">�6.1.�pam_access - logdaemon style login access control</td></tr></table></div></body></html> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-overview.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-overview.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-overview.html 2007-07-10 12:01:41.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-overview.html 2007-10-01 12:16:54.000000000 +0200 @@ -1,22 +1,22 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�3.�Overview</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-text-conventions.html" title="Chapter�2.�Some comments on the text"><link rel="next" href="sag-configuration.html" title="Chapter�4.�The Linux-PAM configuration file"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�3.�Overview</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-text-conventions.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-configuration.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-overview"></a>Chapter�3.�Overview</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�3.�Overview</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-text-conventions.html" title="Chapter�2.�Some comments on the text"><link rel="next" href="sag-configuration.html" title="Chapter�4.�The Linux-PAM configuration file"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�3.�Overview</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-text-conventions.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-configuration.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-overview"></a>Chapter�3.�Overview</h2></div></div></div><p> For the uninitiated, we begin by considering an example. We take an application that grants some service to users; - <span><strong class="command">login</strong></span> is one such program. - <span><strong class="command">Login</strong></span> does two things, it first establishes that + <span class="command"><strong>login</strong></span> is one such program. + <span class="command"><strong>Login</strong></span> does two things, it first establishes that the requesting user is whom they claim to be and second provides them with the requested service: in the case of - <span><strong class="command">login</strong></span> the service is a command shell + <span class="command"><strong>login</strong></span> the service is a command shell (bash, tcsh, zsh, etc.) running with the identity of the user. </p><p> Traditionally, the former step is achieved by the - <span><strong class="command">login</strong></span> application prompting the user for a + <span class="command"><strong>login</strong></span> application prompting the user for a password and then verifying that it agrees with that located on the system; hence verifying that as far as the system is concerned the user is who they claim to be. This is the task that is delegated to <span class="emphasis"><em>Linux-PAM</em></span>. </p><p> From the perspective of the application programmer (in this case - the person that wrote the <span><strong class="command">login</strong></span> application), + the person that wrote the <span class="command"><strong>login</strong></span> application), <span class="emphasis"><em>Linux-PAM</em></span> takes care of this authentication task -- verifying the identity of the user. </p><p> @@ -26,7 +26,7 @@ used. You have the freedom to set the scheme for any/all PAM-aware applications on your Linux system. That is, you can authenticate from anything as naive as - <span class="emphasis"><em>simple trust</em></span> (<span><strong class="command">pam_permit</strong></span>) + <span class="emphasis"><em>simple trust</em></span> (<span class="command"><strong>pam_permit</strong></span>) to something as paranoid as a combination of a retinal scan, a voice print and a one-time password! </p><p> @@ -52,7 +52,7 @@ The management functions are performed by <span class="emphasis"><em>modules</em></span> specified in the configuration file. The syntax for this file is discussed in the section - <a href="sag-configuration.html" title="Chapter�4.�The Linux-PAM configuration file">below</a>. + <a class="link" href="sag-configuration.html" title="Chapter�4.�The Linux-PAM configuration file">below</a>. </p><p> Here is a figure that describes the overall organization of <span class="emphasis"><em>Linux-PAM</em></span>: diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_access.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_access.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_access.html 2007-07-10 12:01:43.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_access.html 2007-10-01 12:16:55.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.1.�pam_access - logdaemon style login access control</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="next" href="sag-pam_cracklib.html" title="6.2.�pam_cracklib - checks the password against dictionary words"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.1.�pam_access - logdaemon style login access control</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-module-reference.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_cracklib.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_access"></a>6.1.�pam_access - logdaemon style login access control</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_access.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.1.�pam_access - logdaemon style login access control</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="next" href="sag-pam_cracklib.html" title="6.2.�pam_cracklib - checks the password against dictionary words"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.1.�pam_access - logdaemon style login access control</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-module-reference.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_cracklib.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_access"></a>6.1.�pam_access - logdaemon style login access control</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_access.so</code> [ debug ] [ nodefgroup diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_cracklib.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_cracklib.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_cracklib.html 2007-07-10 12:01:43.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_cracklib.html 2007-10-01 12:16:55.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.2.�pam_cracklib - checks the password against dictionary words</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_access.html" title="6.1.�pam_access - logdaemon style login access control"><link rel="next" href="sag-pam_debug.html" title="6.3.�pam_debug - debug the PAM stack"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.2.�pam_cracklib - checks the password against dictionary words</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_access.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_debug.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_cracklib"></a>6.2.�pam_cracklib - checks the password against dictionary words</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_cracklib.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.2.�pam_cracklib - checks the password against dictionary words</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_access.html" title="6.1.�pam_access - logdaemon style login access control"><link rel="next" href="sag-pam_debug.html" title="6.3.�pam_debug - debug the PAM stack"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.2.�pam_cracklib - checks the password against dictionary words</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_access.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_debug.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_cracklib"></a>6.2.�pam_cracklib - checks the password against dictionary words</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_cracklib.so</code> [ <em class="replaceable"><code>...</code></em> ]</p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_cracklib-description"></a>6.2.1.�DESCRIPTION</h3></div></div></div><p> This module can be plugged into the <span class="emphasis"><em>password</em></span> stack of diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_debug.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_debug.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_debug.html 2007-07-10 12:01:43.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_debug.html 2007-10-01 12:16:56.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.3.�pam_debug - debug the PAM stack</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_cracklib.html" title="6.2.�pam_cracklib - checks the password against dictionary words"><link rel="next" href="sag-pam_deny.html" title="6.4.�pam_deny - locking-out PAM module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.3.�pam_debug - debug the PAM stack</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_cracklib.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_deny.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_debug"></a>6.3.�pam_debug - debug the PAM stack</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_debug.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.3.�pam_debug - debug the PAM stack</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_cracklib.html" title="6.2.�pam_cracklib - checks the password against dictionary words"><link rel="next" href="sag-pam_deny.html" title="6.4.�pam_deny - locking-out PAM module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.3.�pam_debug - debug the PAM stack</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_cracklib.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_deny.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_debug"></a>6.3.�pam_debug - debug the PAM stack</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_debug.so</code> [ auth=<em class="replaceable"><code>value</code></em> ] [ cred=<em class="replaceable"><code>value</code></em> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_deny.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_deny.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_deny.html 2007-07-10 12:01:43.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_deny.html 2007-10-01 12:16:56.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.4.�pam_deny - locking-out PAM module</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_debug.html" title="6.3.�pam_debug - debug the PAM stack"><link rel="next" href="sag-pam_echo.html" title="6.5.�pam_echo - print text messages"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.4.�pam_deny - locking-out PAM module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_debug.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_echo.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_deny"></a>6.4.�pam_deny - locking-out PAM module</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_deny.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_deny-description"></a>6.4.1.�DESCRIPTION</h3></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.4.�pam_deny - locking-out PAM module</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_debug.html" title="6.3.�pam_debug - debug the PAM stack"><link rel="next" href="sag-pam_echo.html" title="6.5.�pam_echo - print text messages"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.4.�pam_deny - locking-out PAM module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_debug.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_echo.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_deny"></a>6.4.�pam_deny - locking-out PAM module</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_deny.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_deny-description"></a>6.4.1.�DESCRIPTION</h3></div></div></div><p> This module can be used to deny access. It always indicates a failure to the application through the PAM framework. It might be suitable for using for default (the <span class="emphasis"><em>OTHER</em></span>) entries. diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_echo.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_echo.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_echo.html 2007-07-10 12:01:43.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_echo.html 2007-10-01 12:16:56.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.5.�pam_echo - print text messages</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_deny.html" title="6.4.�pam_deny - locking-out PAM module"><link rel="next" href="sag-pam_env.html" title="6.6.�pam_env - set/unset environment variables"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.5.�pam_echo - print text messages</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_deny.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_env.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_echo"></a>6.5.�pam_echo - print text messages</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_echo.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.5.�pam_echo - print text messages</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_deny.html" title="6.4.�pam_deny - locking-out PAM module"><link rel="next" href="sag-pam_env.html" title="6.6.�pam_env - set/unset environment variables"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.5.�pam_echo - print text messages</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_deny.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_env.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_echo"></a>6.5.�pam_echo - print text messages</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_echo.so</code> [ file=<em class="replaceable"><code>/path/message</code></em> ]</p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_echo-description"></a>6.5.1.�DESCRIPTION</h3></div></div></div><p> The <span class="emphasis"><em>pam_echo</em></span> PAM module is for printing diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_env.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_env.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_env.html 2007-07-10 12:01:43.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_env.html 2007-10-01 12:16:56.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.6.�pam_env - set/unset environment variables</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_echo.html" title="6.5.�pam_echo - print text messages"><link rel="next" href="sag-pam_exec.html" title="6.7.�pam_exec - call an external command"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.6.�pam_env - set/unset environment variables</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_echo.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_exec.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_env"></a>6.6.�pam_env - set/unset environment variables</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_env.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.6.�pam_env - set/unset environment variables</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_echo.html" title="6.5.�pam_echo - print text messages"><link rel="next" href="sag-pam_exec.html" title="6.7.�pam_exec - call an external command"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.6.�pam_env - set/unset environment variables</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_echo.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_exec.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_env"></a>6.6.�pam_env - set/unset environment variables</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_env.so</code> [ debug ] [ conffile=<em class="replaceable"><code>conf-file</code></em> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_exec.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_exec.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_exec.html 2007-07-10 12:01:43.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_exec.html 2007-10-01 12:16:56.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.7.�pam_exec - call an external command</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_env.html" title="6.6.�pam_env - set/unset environment variables"><link rel="next" href="sag-pam_faildelay.html" title="6.8.�pam_faildelay - change the delay on failure per-application"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.7.�pam_exec - call an external command</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_env.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_faildelay.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_exec"></a>6.7.�pam_exec - call an external command</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_exec.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.7.�pam_exec - call an external command</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_env.html" title="6.6.�pam_env - set/unset environment variables"><link rel="next" href="sag-pam_faildelay.html" title="6.8.�pam_faildelay - change the delay on failure per-application"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.7.�pam_exec - call an external command</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_env.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_faildelay.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_exec"></a>6.7.�pam_exec - call an external command</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_exec.so</code> [ debug ] [ seteuid diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_faildelay.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_faildelay.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_faildelay.html 2007-07-10 12:01:43.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_faildelay.html 2007-10-01 12:16:56.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.8.�pam_faildelay - change the delay on failure per-application</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_exec.html" title="6.7.�pam_exec - call an external command"><link rel="next" href="sag-pam_filter.html" title="6.9.�pam_filter - filter module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.8.�pam_faildelay - change the delay on failure per-application</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_exec.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_filter.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_faildelay"></a>6.8.�pam_faildelay - change the delay on failure per-application</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_faildelay.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.8.�pam_faildelay - change the delay on failure per-application</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_exec.html" title="6.7.�pam_exec - call an external command"><link rel="next" href="sag-pam_filter.html" title="6.9.�pam_filter - filter module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.8.�pam_faildelay - change the delay on failure per-application</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_exec.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_filter.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_faildelay"></a>6.8.�pam_faildelay - change the delay on failure per-application</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_faildelay.so</code> [ debug ] [ delay=<em class="replaceable"><code>microseconds</code></em> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_filter.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_filter.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_filter.html 2007-07-10 12:01:44.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_filter.html 2007-10-01 12:16:57.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.9.�pam_filter - filter module</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_faildelay.html" title="6.8.�pam_faildelay - change the delay on failure per-application"><link rel="next" href="sag-pam_ftp.html" title="6.10.�pam_ftp - module for anonymous access"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.9.�pam_filter - filter module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_faildelay.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_ftp.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_filter"></a>6.9.�pam_filter - filter module</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_filter.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.9.�pam_filter - filter module</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_faildelay.html" title="6.8.�pam_faildelay - change the delay on failure per-application"><link rel="next" href="sag-pam_ftp.html" title="6.10.�pam_ftp - module for anonymous access"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.9.�pam_filter - filter module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_faildelay.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_ftp.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_filter"></a>6.9.�pam_filter - filter module</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_filter.so</code> [ debug ] [ new_term diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_ftp.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_ftp.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_ftp.html 2007-07-10 12:01:44.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_ftp.html 2007-10-01 12:16:57.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.10.�pam_ftp - module for anonymous access</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_filter.html" title="6.9.�pam_filter - filter module"><link rel="next" href="sag-pam_group.html" title="6.11.�pam_group - module to modify group access"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.10.�pam_ftp - module for anonymous access</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_filter.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_group.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_ftp"></a>6.10.�pam_ftp - module for anonymous access</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_ftp.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.10.�pam_ftp - module for anonymous access</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_filter.html" title="6.9.�pam_filter - filter module"><link rel="next" href="sag-pam_group.html" title="6.11.�pam_group - module to modify group access"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.10.�pam_ftp - module for anonymous access</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_filter.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_group.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_ftp"></a>6.10.�pam_ftp - module for anonymous access</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_ftp.so</code> [ debug ] [ ignore diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_group.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_group.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_group.html 2007-07-10 12:01:44.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_group.html 2007-10-01 12:16:57.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.11.�pam_group - module to modify group access</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_ftp.html" title="6.10.�pam_ftp - module for anonymous access"><link rel="next" href="sag-pam_issue.html" title="6.12.�pam_issue - add issue file to user prompt"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.11.�pam_group - module to modify group access</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_ftp.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_issue.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_group"></a>6.11.�pam_group - module to modify group access</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_group.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_group-description"></a>6.11.1.�DESCRIPTION</h3></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.11.�pam_group - module to modify group access</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_ftp.html" title="6.10.�pam_ftp - module for anonymous access"><link rel="next" href="sag-pam_issue.html" title="6.12.�pam_issue - add issue file to user prompt"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.11.�pam_group - module to modify group access</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_ftp.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_issue.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_group"></a>6.11.�pam_group - module to modify group access</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_group.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_group-description"></a>6.11.1.�DESCRIPTION</h3></div></div></div><p> The pam_group PAM module does not authenticate the user, but instead it grants group memberships (in the credential setting phase of the authentication module) to the user. Such memberships are based on the diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_issue.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_issue.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_issue.html 2007-07-10 12:01:44.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_issue.html 2007-10-01 12:16:57.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.12.�pam_issue - add issue file to user prompt</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_group.html" title="6.11.�pam_group - module to modify group access"><link rel="next" href="sag-pam_keyinit.html" title="6.13.�pam_keyinit - display the keyinit file"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.12.�pam_issue - add issue file to user prompt</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_group.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_keyinit.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_issue"></a>6.12.�pam_issue - add issue file to user prompt</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_issue.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.12.�pam_issue - add issue file to user prompt</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_group.html" title="6.11.�pam_group - module to modify group access"><link rel="next" href="sag-pam_keyinit.html" title="6.13.�pam_keyinit - display the keyinit file"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.12.�pam_issue - add issue file to user prompt</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_group.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_keyinit.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_issue"></a>6.12.�pam_issue - add issue file to user prompt</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_issue.so</code> [ noesc ] [ issue=<em class="replaceable"><code>issue-file-name</code></em> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_keyinit.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_keyinit.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_keyinit.html 2007-07-10 12:01:44.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_keyinit.html 2007-10-01 12:16:57.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.13.�pam_keyinit - display the keyinit file</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_issue.html" title="6.12.�pam_issue - add issue file to user prompt"><link rel="next" href="sag-pam_lastlog.html" title="6.14.�pam_lastlog - display date of last login"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.13.�pam_keyinit - display the keyinit file</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_issue.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_lastlog.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_keyinit"></a>6.13.�pam_keyinit - display the keyinit file</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_keyinit.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.13.�pam_keyinit - display the keyinit file</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_issue.html" title="6.12.�pam_issue - add issue file to user prompt"><link rel="next" href="sag-pam_lastlog.html" title="6.14.�pam_lastlog - display date of last login"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.13.�pam_keyinit - display the keyinit file</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_issue.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_lastlog.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_keyinit"></a>6.13.�pam_keyinit - display the keyinit file</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_keyinit.so</code> [ debug ] [ force @@ -35,7 +35,7 @@ The keyutils package is used to manipulate keys more directly. This can be obtained from: </p><p> - <a href="http://people.redhat.com/~dhowells/keyutils/" target="_top"> + <a class="ulink" href="http://people.redhat.com/~dhowells/keyutils/" target="_top"> Keyutils </a> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_keyinit-options"></a>6.13.2.�OPTIONS</h3></div></div></div><div class="variablelist"><dl><dt><span class="term"> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_lastlog.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_lastlog.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_lastlog.html 2007-07-10 12:01:44.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_lastlog.html 2007-10-01 12:16:57.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.14.�pam_lastlog - display date of last login</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_keyinit.html" title="6.13.�pam_keyinit - display the keyinit file"><link rel="next" href="sag-pam_limits.html" title="6.15.�pam_limits - limit resources"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.14.�pam_lastlog - display date of last login</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_keyinit.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_limits.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_lastlog"></a>6.14.�pam_lastlog - display date of last login</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_lastlog.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.14.�pam_lastlog - display date of last login</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_keyinit.html" title="6.13.�pam_keyinit - display the keyinit file"><link rel="next" href="sag-pam_limits.html" title="6.15.�pam_limits - limit resources"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.14.�pam_lastlog - display date of last login</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_keyinit.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_limits.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_lastlog"></a>6.14.�pam_lastlog - display date of last login</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_lastlog.so</code> [ debug ] [ silent diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_limits.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_limits.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_limits.html 2007-07-10 12:01:44.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_limits.html 2007-10-01 12:16:57.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.15.�pam_limits - limit resources</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_lastlog.html" title="6.14.�pam_lastlog - display date of last login"><link rel="next" href="sag-pam_listfile.html" title="6.16.�pam_listfile - deny or allow services based on an arbitrary file"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.15.�pam_limits - limit resources</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_lastlog.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_listfile.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_limits"></a>6.15.�pam_limits - limit resources</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_limits.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.15.�pam_limits - limit resources</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_lastlog.html" title="6.14.�pam_lastlog - display date of last login"><link rel="next" href="sag-pam_listfile.html" title="6.16.�pam_listfile - deny or allow services based on an arbitrary file"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.15.�pam_limits - limit resources</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_lastlog.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_listfile.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_limits"></a>6.15.�pam_limits - limit resources</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_limits.so</code> [ change_uid ] [ conf=<em class="replaceable"><code>/path/to/limits.conf</code></em> @@ -60,7 +60,8 @@ limits on the specified user/group etc. . </p></dd></dl></div></dd><dt><span class="term"> <code class="option"><item></code> - </span></dt><dd><div class="variablelist"><dl><dt><span class="term"><code class="option">core</code></span></dt><dd><p>limits the core file size (KB)</p></dd><dt><span class="term"><code class="option">data</code></span></dt><dd><p>maximum data size (KB)</p></dd><dt><span class="term"><code class="option">fsize</code></span></dt><dd><p>maximum filesize (KB)</p></dd><dt><span class="term"><code class="option">memlock</code></span></dt><dd><p>maximum locked-in-memory address space (KB)</p></dd><dt><span class="term"><code class="option">nofile</code></span></dt><dd><p>maximum number of open files</p></dd><dt><span class="term"><code class="option">rss</code></span></dt><dd><p>maximum resident set size (KB)</p></dd><dt><span class="term"><code class="option">stack</code></span></dt><dd><p>maximum stack size (KB)</p></dd><dt><span class="term"><code class="option">cpu</code></span></dt><dd><p>maximum CPU time (minutes)</p></dd><dt><span class="term"><code class="option">nproc</code></span></dt><dd><p>maximum number of processes</p></dd><dt><span class="term"><code class="option">as</code></span></dt><dd><p>address space limit (KB)</p></dd><dt><span class="term"><code class="option">maxlogins</code></span></dt><dd><p>maximum number of logins for this user</p></dd><dt><span class="term"><code class="option">maxsyslogins</code></span></dt><dd><p>maximum number of logins on system</p></dd><dt><span class="term"><code class="option">priority</code></span></dt><dd><p>the priority to run user process with (negative + </span></dt><dd><div class="variablelist"><dl><dt><span class="term"><code class="option">core</code></span></dt><dd><p>limits the core file size (KB)</p></dd><dt><span class="term"><code class="option">data</code></span></dt><dd><p>maximum data size (KB)</p></dd><dt><span class="term"><code class="option">fsize</code></span></dt><dd><p>maximum filesize (KB)</p></dd><dt><span class="term"><code class="option">memlock</code></span></dt><dd><p>maximum locked-in-memory address space (KB)</p></dd><dt><span class="term"><code class="option">nofile</code></span></dt><dd><p>maximum number of open files</p></dd><dt><span class="term"><code class="option">rss</code></span></dt><dd><p>maximum resident set size (KB)</p></dd><dt><span class="term"><code class="option">stack</code></span></dt><dd><p>maximum stack size (KB)</p></dd><dt><span class="term"><code class="option">cpu</code></span></dt><dd><p>maximum CPU time (minutes)</p></dd><dt><span class="term"><code class="option">nproc</code></span></dt><dd><p>maximum number of processes</p></dd><dt><span class="term"><code class="option">as</code></span></dt><dd><p>address space limit (KB)</p></dd><dt><span class="term"><code class="option">maxlogins</code></span></dt><dd><p>maximum number of logins for this user except + for this with <span class="emphasis"><em>uid=0</em></span></p></dd><dt><span class="term"><code class="option">maxsyslogins</code></span></dt><dd><p>maximum number of logins on system</p></dd><dt><span class="term"><code class="option">priority</code></span></dt><dd><p>the priority to run user process with (negative values boost process priority)</p></dd><dt><span class="term"><code class="option">locks</code></span></dt><dd><p>maximum locked files (Linux 2.4 and higher)</p></dd><dt><span class="term"><code class="option">sigpending</code></span></dt><dd><p>maximum number of pending signals (Linux 2.6 and higher)</p></dd><dt><span class="term"><code class="option">msqqueue</code></span></dt><dd><p>maximum memory used by POSIX message queues (bytes) (Linux 2.6 and higher)</p></dd><dt><span class="term"><code class="option">nice</code></span></dt><dd><p>maximum nice priority allowed to raise to (Linux 2.6.12 and higher)</p></dd><dt><span class="term"><code class="option">rtprio</code></span></dt><dd><p>maximum realtime priority allowed for non-privileged processes (Linux 2.6.12 and higher)</p></dd></dl></div></dd></dl></div><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_listfile.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_listfile.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_listfile.html 2007-07-10 12:01:44.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_listfile.html 2007-10-01 12:16:58.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.16.�pam_listfile - deny or allow services based on an arbitrary file</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_limits.html" title="6.15.�pam_limits - limit resources"><link rel="next" href="sag-pam_localuser.html" title="6.17.�pam_localuser - require users to be listed in /etc/passwd"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.16.�pam_listfile - deny or allow services based on an arbitrary file</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_limits.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_localuser.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_listfile"></a>6.16.�pam_listfile - deny or allow services based on an arbitrary file</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_listfile.so</code> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.16.�pam_listfile - deny or allow services based on an arbitrary file</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_limits.html" title="6.15.�pam_limits - limit resources"><link rel="next" href="sag-pam_localuser.html" title="6.17.�pam_localuser - require users to be listed in /etc/passwd"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.16.�pam_listfile - deny or allow services based on an arbitrary file</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_limits.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_localuser.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_listfile"></a>6.16.�pam_listfile - deny or allow services based on an arbitrary file</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_listfile.so</code> item=[tty|user|rhost|ruser|group|shell] sense=[allow|deny] @@ -8,6 +8,8 @@ onerr=[succeed|fail] [ apply=[<em class="replaceable"><code>user</code></em>|<em class="replaceable"><code>@group</code></em>] + ] [ + quiet ]</p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_listfile-description"></a>6.16.1.�DESCRIPTION</h3></div></div></div><p> pam_listfile is a PAM module which provides a way to deny or allow services based on an arbitrary file. @@ -76,6 +78,11 @@ Restrict the user class for which the restriction apply. Note that with <code class="option">item=[user|ruser|group]</code> this oes not make sense, but for <code class="option">item=[tty|rhost|shell]</code> it have a meaning. + </p></dd><dt><span class="term"> + <code class="option">quiet</code> + </span></dt><dd><p> + Do not treat service refusals or missing list files as + errors that need to be logged. </p></dd></dl></div><p> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_listfile-services"></a>6.16.3.�MODULE SERVICES PROVIDED</h3></div></div></div><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_localuser.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_localuser.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_localuser.html 2007-07-10 12:01:45.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_localuser.html 2007-10-01 12:16:58.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.17.�pam_localuser - require users to be listed in /etc/passwd</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_listfile.html" title="6.16.�pam_listfile - deny or allow services based on an arbitrary file"><link rel="next" href="sag-pam_loginuid.html" title="6.18.�pam_loginuid - record user's login uid to the process attribute"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.17.�pam_localuser - require users to be listed in /etc/passwd</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_listfile.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_loginuid.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_localuser"></a>6.17.�pam_localuser - require users to be listed in /etc/passwd</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_localuser.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.17.�pam_localuser - require users to be listed in /etc/passwd</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_listfile.html" title="6.16.�pam_listfile - deny or allow services based on an arbitrary file"><link rel="next" href="sag-pam_loginuid.html" title="6.18.�pam_loginuid - record user's login uid to the process attribute"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.17.�pam_localuser - require users to be listed in /etc/passwd</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_listfile.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_loginuid.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_localuser"></a>6.17.�pam_localuser - require users to be listed in /etc/passwd</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_localuser.so</code> [ debug ] [ file=<em class="replaceable"><code>/path/passwd</code></em> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_loginuid.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_loginuid.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_loginuid.html 2007-07-10 12:01:45.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_loginuid.html 2007-10-01 12:16:58.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.18.�pam_loginuid - record user's login uid to the process attribute</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_localuser.html" title="6.17.�pam_localuser - require users to be listed in /etc/passwd"><link rel="next" href="sag-pam_mail.html" title="6.19.�pam_mail - inform about available mail"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.18.�pam_loginuid - record user's login uid to the process attribute</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_localuser.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_mail.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_loginuid"></a>6.18.�pam_loginuid - record user's login uid to the process attribute</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_loginuid.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.18.�pam_loginuid - record user's login uid to the process attribute</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_localuser.html" title="6.17.�pam_localuser - require users to be listed in /etc/passwd"><link rel="next" href="sag-pam_mail.html" title="6.19.�pam_mail - inform about available mail"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.18.�pam_loginuid - record user's login uid to the process attribute</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_localuser.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_mail.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_loginuid"></a>6.18.�pam_loginuid - record user's login uid to the process attribute</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_loginuid.so</code> [ require_auditd ]</p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_loginuid-description"></a>6.18.1.�DESCRIPTION</h3></div></div></div><p> The pam_loginuid module sets the loginuid process attribute for the diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_mail.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_mail.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_mail.html 2007-07-10 12:01:45.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_mail.html 2007-10-01 12:16:58.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.19.�pam_mail - inform about available mail</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_loginuid.html" title="6.18.�pam_loginuid - record user's login uid to the process attribute"><link rel="next" href="sag-pam_mkhomedir.html" title="6.20.�pam_mkhomedir - create users home directory"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.19.�pam_mail - inform about available mail</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_loginuid.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_mkhomedir.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_mail"></a>6.19.�pam_mail - inform about available mail</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_mail.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.19.�pam_mail - inform about available mail</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_loginuid.html" title="6.18.�pam_loginuid - record user's login uid to the process attribute"><link rel="next" href="sag-pam_mkhomedir.html" title="6.20.�pam_mkhomedir - create users home directory"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.19.�pam_mail - inform about available mail</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_loginuid.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_mkhomedir.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_mail"></a>6.19.�pam_mail - inform about available mail</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_mail.so</code> [ close ] [ debug diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_mkhomedir.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_mkhomedir.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_mkhomedir.html 2007-07-10 12:01:45.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_mkhomedir.html 2007-10-01 12:16:58.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.20.�pam_mkhomedir - create users home directory</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_mail.html" title="6.19.�pam_mail - inform about available mail"><link rel="next" href="sag-pam_motd.html" title="6.21.�pam_motd - display the motd file"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.20.�pam_mkhomedir - create users home directory</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_mail.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_motd.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_mkhomedir"></a>6.20.�pam_mkhomedir - create users home directory</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_mkhomedir.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.20.�pam_mkhomedir - create users home directory</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_mail.html" title="6.19.�pam_mail - inform about available mail"><link rel="next" href="sag-pam_motd.html" title="6.21.�pam_motd - display the motd file"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.20.�pam_mkhomedir - create users home directory</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_mail.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_motd.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_mkhomedir"></a>6.20.�pam_mkhomedir - create users home directory</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_mkhomedir.so</code> [ silent ] [ umask=<em class="replaceable"><code>mode</code></em> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_motd.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_motd.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_motd.html 2007-07-10 12:01:45.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_motd.html 2007-10-01 12:16:58.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.21.�pam_motd - display the motd file</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_mkhomedir.html" title="6.20.�pam_mkhomedir - create users home directory"><link rel="next" href="sag-pam_namespace.html" title="6.22.�pam_namespace - setup a private namespace"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.21.�pam_motd - display the motd file</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_mkhomedir.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_namespace.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_motd"></a>6.21.�pam_motd - display the motd file</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_motd.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.21.�pam_motd - display the motd file</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_mkhomedir.html" title="6.20.�pam_mkhomedir - create users home directory"><link rel="next" href="sag-pam_namespace.html" title="6.22.�pam_namespace - setup a private namespace"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.21.�pam_motd - display the motd file</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_mkhomedir.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_namespace.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_motd"></a>6.21.�pam_motd - display the motd file</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_motd.so</code> [ motd=<em class="replaceable"><code>/path/filename</code></em> ]</p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_motd-description"></a>6.21.1.�DESCRIPTION</h3></div></div></div><p> pam_motd is a PAM module that can be used to display diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_namespace.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_namespace.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_namespace.html 2007-07-10 12:01:45.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_namespace.html 2007-10-01 12:16:58.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.22.�pam_namespace - setup a private namespace</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_motd.html" title="6.21.�pam_motd - display the motd file"><link rel="next" href="sag-pam_nologin.html" title="6.23.�pam_nologin - prevent non-root users from login"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.22.�pam_namespace - setup a private namespace</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_motd.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_nologin.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_namespace"></a>6.22.�pam_namespace - setup a private namespace</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_namespace.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.22.�pam_namespace - setup a private namespace</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_motd.html" title="6.21.�pam_motd - display the motd file"><link rel="next" href="sag-pam_nologin.html" title="6.23.�pam_nologin - prevent non-root users from login"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.22.�pam_namespace - setup a private namespace</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_motd.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_nologin.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_namespace"></a>6.22.�pam_namespace - setup a private namespace</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_namespace.so</code> [ debug ] [ unmnt_remnt diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_nologin.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_nologin.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_nologin.html 2007-07-10 12:01:45.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_nologin.html 2007-10-01 12:16:58.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.23.�pam_nologin - prevent non-root users from login</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_namespace.html" title="6.22.�pam_namespace - setup a private namespace"><link rel="next" href="sag-pam_permit.html" title="6.24.�pam_permit - the promiscuous module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.23.�pam_nologin - prevent non-root users from login</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_namespace.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_permit.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_nologin"></a>6.23.�pam_nologin - prevent non-root users from login</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_nologin.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.23.�pam_nologin - prevent non-root users from login</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_namespace.html" title="6.22.�pam_namespace - setup a private namespace"><link rel="next" href="sag-pam_permit.html" title="6.24.�pam_permit - the promiscuous module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.23.�pam_nologin - prevent non-root users from login</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_namespace.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_permit.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_nologin"></a>6.23.�pam_nologin - prevent non-root users from login</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_nologin.so</code> [ file=<em class="replaceable"><code>/path/nologin</code></em> ] [ successok diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_permit.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_permit.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_permit.html 2007-07-10 12:01:45.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_permit.html 2007-10-01 12:16:58.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.24.�pam_permit - the promiscuous module</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_nologin.html" title="6.23.�pam_nologin - prevent non-root users from login"><link rel="next" href="sag-pam_rhosts.html" title="6.25.�pam_rhosts - grant access using .rhosts file"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.24.�pam_permit - the promiscuous module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_nologin.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_rhosts.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_permit"></a>6.24.�pam_permit - the promiscuous module</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_permit.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_permit-description"></a>6.24.1.�DESCRIPTION</h3></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.24.�pam_permit - the promiscuous module</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_nologin.html" title="6.23.�pam_nologin - prevent non-root users from login"><link rel="next" href="sag-pam_rhosts.html" title="6.25.�pam_rhosts - grant access using .rhosts file"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.24.�pam_permit - the promiscuous module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_nologin.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_rhosts.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_permit"></a>6.24.�pam_permit - the promiscuous module</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_permit.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_permit-description"></a>6.24.1.�DESCRIPTION</h3></div></div></div><p> pam_permit is a PAM module that always permit access. It does nothing else. </p><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_rhosts.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_rhosts.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_rhosts.html 2007-07-10 12:01:45.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_rhosts.html 2007-10-01 12:16:59.000000000 +0200 @@ -1,7 +1,7 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.25.�pam_rhosts - grant access using .rhosts file</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_permit.html" title="6.24.�pam_permit - the promiscuous module"><link rel="next" href="sag-pam_rootok.html" title="6.26.�pam_rootok - gain only root access"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.25.�pam_rhosts - grant access using .rhosts file</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_permit.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_rootok.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_rhosts"></a>6.25.�pam_rhosts - grant access using .rhosts file</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_rhosts.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_rhosts-description"></a>6.25.1.�DESCRIPTION</h3></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.25.�pam_rhosts - grant access using .rhosts file</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_permit.html" title="6.24.�pam_permit - the promiscuous module"><link rel="next" href="sag-pam_rootok.html" title="6.26.�pam_rootok - gain only root access"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.25.�pam_rhosts - grant access using .rhosts file</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_permit.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_rootok.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_rhosts"></a>6.25.�pam_rhosts - grant access using .rhosts file</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_rhosts.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_rhosts-description"></a>6.25.1.�DESCRIPTION</h3></div></div></div><p> This module performs the standard network authentication for services, - as used by traditional implementations of <span><strong class="command">rlogin</strong></span> - and <span><strong class="command">rsh</strong></span> etc. + as used by traditional implementations of <span class="command"><strong>rlogin</strong></span> + and <span class="command"><strong>rsh</strong></span> etc. </p><p> The authentication mechanism of this module is based on the contents of two files; <code class="filename">/etc/hosts.equiv</code> (or @@ -16,7 +16,7 @@ </p><p> The module authenticates a remote user (internally specified by the item <em class="parameter"><code>PAM_RUSER</code></em> connecting from the remote - host (internally specified by the item <span><strong class="command">PAM_RHOST</strong></span>). + host (internally specified by the item <span class="command"><strong>PAM_RHOST</strong></span>). Accordingly, for applications to be compatible this authentication module they must set these items prior to calling <code class="function">pam_authenticate()</code>. The module is not capable @@ -43,7 +43,7 @@ User is not known to system. </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_rhosts-examples"></a>6.25.5.�EXAMPLES</h3></div></div></div><p> To grant a remote user access by <code class="filename">/etc/hosts.equiv</code> - or <code class="filename">.rhosts</code> for <span><strong class="command">rsh</strong></span> add the + or <code class="filename">.rhosts</code> for <span class="command"><strong>rsh</strong></span> add the following lines to <code class="filename">/etc/pam.d/rsh</code>: </p><pre class="programlisting"> #%PAM-1.0 diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_rootok.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_rootok.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_rootok.html 2007-07-10 12:01:45.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_rootok.html 2007-10-01 12:16:59.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.26.�pam_rootok - gain only root access</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_rhosts.html" title="6.25.�pam_rhosts - grant access using .rhosts file"><link rel="next" href="sag-pam_securetty.html" title="6.27.�pam_securetty - limit root login to special devices"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.26.�pam_rootok - gain only root access</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_rhosts.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_securetty.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_rootok"></a>6.26.�pam_rootok - gain only root access</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_rootok.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.26.�pam_rootok - gain only root access</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_rhosts.html" title="6.25.�pam_rhosts - grant access using .rhosts file"><link rel="next" href="sag-pam_securetty.html" title="6.27.�pam_securetty - limit root login to special devices"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.26.�pam_rootok - gain only root access</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_rhosts.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_securetty.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_rootok"></a>6.26.�pam_rootok - gain only root access</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_rootok.so</code> [ debug ]</p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_rootok-description"></a>6.26.1.�DESCRIPTION</h3></div></div></div><p> pam_rootok is a PAM module that authenticates the user if their diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_securetty.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_securetty.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_securetty.html 2007-07-10 12:01:46.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_securetty.html 2007-10-01 12:16:59.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.27.�pam_securetty - limit root login to special devices</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_rootok.html" title="6.26.�pam_rootok - gain only root access"><link rel="next" href="sag-pam_selinux.html" title="6.28.�pam_selinux - set the default security context"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.27.�pam_securetty - limit root login to special devices</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_rootok.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_selinux.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_securetty"></a>6.27.�pam_securetty - limit root login to special devices</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_securetty.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.27.�pam_securetty - limit root login to special devices</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_rootok.html" title="6.26.�pam_rootok - gain only root access"><link rel="next" href="sag-pam_selinux.html" title="6.28.�pam_selinux - set the default security context"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.27.�pam_securetty - limit root login to special devices</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_rootok.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_selinux.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_securetty"></a>6.27.�pam_securetty - limit root login to special devices</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_securetty.so</code> [ debug ]</p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_securetty-description"></a>6.27.1.�DESCRIPTION</h3></div></div></div><p> pam_securetty is a PAM module that allows root logins only if the diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_selinux.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_selinux.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_selinux.html 2007-07-10 12:01:46.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_selinux.html 2007-10-01 12:16:59.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.28.�pam_selinux - set the default security context</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_securetty.html" title="6.27.�pam_securetty - limit root login to special devices"><link rel="next" href="sag-pam_shells.html" title="6.29.�pam_shells - check for valid login shell"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.28.�pam_selinux - set the default security context</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_securetty.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_shells.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_selinux"></a>6.28.�pam_selinux - set the default security context</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_selinux.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.28.�pam_selinux - set the default security context</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_securetty.html" title="6.27.�pam_securetty - limit root login to special devices"><link rel="next" href="sag-pam_shells.html" title="6.29.�pam_shells - check for valid login shell"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.28.�pam_selinux - set the default security context</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_securetty.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_shells.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_selinux"></a>6.28.�pam_selinux - set the default security context</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_selinux.so</code> [ close ] [ debug diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_shells.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_shells.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_shells.html 2007-07-10 12:01:46.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_shells.html 2007-10-01 12:16:59.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.29.�pam_shells - check for valid login shell</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_selinux.html" title="6.28.�pam_selinux - set the default security context"><link rel="next" href="sag-pam_succeed_if.html" title="6.30.�pam_succeed_if - test account characteristics"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.29.�pam_shells - check for valid login shell</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_selinux.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_succeed_if.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_shells"></a>6.29.�pam_shells - check for valid login shell</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_shells.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_shells-description"></a>6.29.1.�DESCRIPTION</h3></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.29.�pam_shells - check for valid login shell</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_selinux.html" title="6.28.�pam_selinux - set the default security context"><link rel="next" href="sag-pam_succeed_if.html" title="6.30.�pam_succeed_if - test account characteristics"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.29.�pam_shells - check for valid login shell</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_selinux.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_succeed_if.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_shells"></a>6.29.�pam_shells - check for valid login shell</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_shells.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_shells-description"></a>6.29.1.�DESCRIPTION</h3></div></div></div><p> pam_shells is a PAM module that only allows access to the system if the users shell is listed in <code class="filename">/etc/shells</code>. </p><p> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_succeed_if.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_succeed_if.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_succeed_if.html 2007-07-10 12:01:46.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_succeed_if.html 2007-10-01 12:16:59.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.30.�pam_succeed_if - test account characteristics</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_shells.html" title="6.29.�pam_shells - check for valid login shell"><link rel="next" href="sag-pam_tally.html" title="6.31.�pam_tally - login counter (tallying) module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.30.�pam_succeed_if - test account characteristics</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_shells.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_tally.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_succeed_if"></a>6.30.�pam_succeed_if - test account characteristics</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_succeed_if.so</code> [<em class="replaceable"><code>flag</code></em>...] [<em class="replaceable"><code>condition</code></em>...]</p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_succeed_if-description"></a>6.30.1.�DESCRIPTION</h3></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.30.�pam_succeed_if - test account characteristics</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_shells.html" title="6.29.�pam_shells - check for valid login shell"><link rel="next" href="sag-pam_tally.html" title="6.31.�pam_tally - login counter (tallying) module"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.30.�pam_succeed_if - test account characteristics</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_shells.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_tally.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_succeed_if"></a>6.30.�pam_succeed_if - test account characteristics</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_succeed_if.so</code> [<em class="replaceable"><code>flag</code></em>...] [<em class="replaceable"><code>condition</code></em>...]</p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_succeed_if-description"></a>6.30.1.�DESCRIPTION</h3></div></div></div><p> pam_succeed_if.so is designed to succeed or fail authentication based on characteristics of the account belonging to the user being authenticated. One use is to select whether to load other modules based diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_tally.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_tally.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_tally.html 2007-07-10 12:01:46.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_tally.html 2007-10-01 12:17:00.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.31.�pam_tally - login counter (tallying) module</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_succeed_if.html" title="6.30.�pam_succeed_if - test account characteristics"><link rel="next" href="sag-pam_time.html" title="6.32.�pam_time - time controled access"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.31.�pam_tally - login counter (tallying) module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_succeed_if.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_time.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_tally"></a>6.31.�pam_tally - login counter (tallying) module</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_tally.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.31.�pam_tally - login counter (tallying) module</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_succeed_if.html" title="6.30.�pam_succeed_if - test account characteristics"><link rel="next" href="sag-pam_time.html" title="6.32.�pam_time - time controled access"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.31.�pam_tally - login counter (tallying) module</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_succeed_if.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_time.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_tally"></a>6.31.�pam_tally - login counter (tallying) module</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_tally.so</code> [ file=<em class="replaceable"><code>/path/to/counter</code></em> ] [ onerr=[<em class="replaceable"><code>fail</code></em>|<em class="replaceable"><code>succeed</code></em>] @@ -34,8 +34,8 @@ </p><p> pam_tally comes in two parts: <span class="emphasis"><em>pam_tally.so</em></span> and - <span><strong class="command">pam_tally</strong></span>. The former is the PAM module and - the latter, a stand-alone program. <span><strong class="command">pam_tally</strong></span> + <span class="command"><strong>pam_tally</strong></span>. The former is the PAM module and + the latter, a stand-alone program. <span class="command"><strong>pam_tally</strong></span> is an (optional) application which can be used to interrogate and manipulate the counter file. It can display users' counts, set individual counts, or clear all counts. Setting artificially high @@ -48,7 +48,7 @@ Normally, failed attempts to access <span class="emphasis"><em>root</em></span> will <span class="emphasis"><em>not</em></span> cause the root account to become blocked, to prevent denial-of-service: if your users aren't given - shell accounts and root may only login via <span><strong class="command">su</strong></span> or + shell accounts and root may only login via <span class="command"><strong>su</strong></span> or at the machine console (not telnet/rsh, etc), this is safe. </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_tally-options"></a>6.31.2.�OPTIONS</h3></div></div></div><div class="variablelist"><dl><dt><span class="term"> GLOBAL OPTIONS @@ -101,7 +101,7 @@ </span></dt><dd><p> If the module is invoked by a user with uid=0 the counter is not incremented. The sys-admin should use this - for user launched services, like <span><strong class="command">su</strong></span>, + for user launched services, like <span class="command"><strong>su</strong></span>, otherwise this argument should be omitted. </p></dd><dt><span class="term"> <code class="option">no_lock_time</code> @@ -145,7 +145,7 @@ </span></dt><dd><p> If the module is invoked by a user with uid=0 the counter is not incremented. The sys-admin should use this - for user launched services, like <span><strong class="command">su</strong></span>, + for user launched services, like <span class="command"><strong>su</strong></span>, otherwise this argument should be omitted. </p></dd><dt><span class="term"> <code class="option">no_reset</code> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_time.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_time.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_time.html 2007-07-10 12:01:46.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_time.html 2007-10-01 12:17:00.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.32.�pam_time - time controled access</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_tally.html" title="6.31.�pam_tally - login counter (tallying) module"><link rel="next" href="sag-pam_umask.html" title="6.33.�pam_umask - set the file mode creation mask"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.32.�pam_time - time controled access</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_tally.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_umask.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_time"></a>6.32.�pam_time - time controled access</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_time.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_time-description"></a>6.32.1.�DESCRIPTION</h3></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.32.�pam_time - time controled access</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_tally.html" title="6.31.�pam_tally - login counter (tallying) module"><link rel="next" href="sag-pam_umask.html" title="6.33.�pam_umask - set the file mode creation mask"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.32.�pam_time - time controled access</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_tally.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_umask.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_time"></a>6.32.�pam_time - time controled access</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_time.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_time-description"></a>6.32.1.�DESCRIPTION</h3></div></div></div><p> The pam_time PAM module does not authenticate the user, but instead it restricts access to a system and or specific applications at various times of the day and on specific days or over various diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_umask.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_umask.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_umask.html 2007-07-10 12:01:46.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_umask.html 2007-10-01 12:17:00.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.33.�pam_umask - set the file mode creation mask</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_time.html" title="6.32.�pam_time - time controled access"><link rel="next" href="sag-pam_unix.html" title="6.34.�pam_unix - traditional password authentication"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.33.�pam_umask - set the file mode creation mask</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_time.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_unix.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_umask"></a>6.33.�pam_umask - set the file mode creation mask</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_umask.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.33.�pam_umask - set the file mode creation mask</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_time.html" title="6.32.�pam_time - time controled access"><link rel="next" href="sag-pam_unix.html" title="6.34.�pam_unix - traditional password authentication"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.33.�pam_umask - set the file mode creation mask</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_time.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_unix.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_umask"></a>6.33.�pam_umask - set the file mode creation mask</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_umask.so</code> [ debug ] [ silent diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_unix.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_unix.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_unix.html 2007-07-10 12:01:46.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_unix.html 2007-10-01 12:17:00.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.34.�pam_unix - traditional password authentication</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_umask.html" title="6.33.�pam_umask - set the file mode creation mask"><link rel="next" href="sag-pam_userdb.html" title="6.35.�pam_userdb - authenticate against a db database"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.34.�pam_unix - traditional password authentication</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_umask.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_userdb.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_unix"></a>6.34.�pam_unix - traditional password authentication</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_unix.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.34.�pam_unix - traditional password authentication</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_umask.html" title="6.33.�pam_umask - set the file mode creation mask"><link rel="next" href="sag-pam_userdb.html" title="6.35.�pam_userdb - authenticate against a db database"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.34.�pam_unix - traditional password authentication</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_umask.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_userdb.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_unix"></a>6.34.�pam_unix - traditional password authentication</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_unix.so</code> [ ... ]</p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_unix-description"></a>6.34.1.�DESCRIPTION</h3></div></div></div><p> This is the standard Unix authentication module. It uses standard @@ -88,7 +88,7 @@ When password changing enforce the module to set the new password to the one provided by a previously stacked <code class="option">password</code> module (this is used in the - example of the stacking of the <span><strong class="command">pam_cracklib</strong></span> + example of the stacking of the <span class="command"><strong>pam_cracklib</strong></span> module documented above). </p></dd><dt><span class="term"> <code class="option">not_set_pass</code> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_userdb.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_userdb.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_userdb.html 2007-07-10 12:01:47.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_userdb.html 2007-10-01 12:17:00.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.35.�pam_userdb - authenticate against a db database</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_unix.html" title="6.34.�pam_unix - traditional password authentication"><link rel="next" href="sag-pam_warn.html" title="6.36.�pam_warn - logs all PAM items"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.35.�pam_userdb - authenticate against a db database</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_unix.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_warn.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_userdb"></a>6.35.�pam_userdb - authenticate against a db database</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_userdb.so</code> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.35.�pam_userdb - authenticate against a db database</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_unix.html" title="6.34.�pam_unix - traditional password authentication"><link rel="next" href="sag-pam_warn.html" title="6.36.�pam_warn - logs all PAM items"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.35.�pam_userdb - authenticate against a db database</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_unix.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_warn.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_userdb"></a>6.35.�pam_userdb - authenticate against a db database</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_userdb.so</code> db=<em class="replaceable"><code>/path/database</code></em> [ debug diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_warn.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_warn.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_warn.html 2007-07-10 12:01:47.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_warn.html 2007-10-01 12:17:00.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.36.�pam_warn - logs all PAM items</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_userdb.html" title="6.35.�pam_userdb - authenticate against a db database"><link rel="next" href="sag-pam_wheel.html" title="6.37.�pam_wheel - only permit root access to members of group wheel"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.36.�pam_warn - logs all PAM items</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_userdb.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_wheel.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_warn"></a>6.36.�pam_warn - logs all PAM items</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_warn.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_warn-description"></a>6.36.1.�DESCRIPTION</h3></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.36.�pam_warn - logs all PAM items</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_userdb.html" title="6.35.�pam_userdb - authenticate against a db database"><link rel="next" href="sag-pam_wheel.html" title="6.37.�pam_wheel - only permit root access to members of group wheel"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.36.�pam_warn - logs all PAM items</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_userdb.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_wheel.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_warn"></a>6.36.�pam_warn - logs all PAM items</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_warn.so</code> </p></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="sag-pam_warn-description"></a>6.36.1.�DESCRIPTION</h3></div></div></div><p> pam_warn is a PAM module that logs the service, terminal, user, remote user and remote host to <span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span>. The items are not probed for, but instead obtained diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_wheel.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_wheel.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_wheel.html 2007-07-10 12:01:47.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_wheel.html 2007-10-01 12:17:01.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.37.�pam_wheel - only permit root access to members of group wheel</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_warn.html" title="6.36.�pam_warn - logs all PAM items"><link rel="next" href="sag-pam_xauth.html" title="6.38.�pam_xauth - forward xauth keys between users"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.37.�pam_wheel - only permit root access to members of group wheel</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_warn.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_xauth.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_wheel"></a>6.37.�pam_wheel - only permit root access to members of group wheel</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_wheel.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.37.�pam_wheel - only permit root access to members of group wheel</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_warn.html" title="6.36.�pam_warn - logs all PAM items"><link rel="next" href="sag-pam_xauth.html" title="6.38.�pam_xauth - forward xauth keys between users"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.37.�pam_wheel - only permit root access to members of group wheel</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_warn.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-pam_xauth.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_wheel"></a>6.37.�pam_wheel - only permit root access to members of group wheel</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_wheel.so</code> [ debug ] [ deny diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_xauth.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_xauth.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-pam_xauth.html 2007-07-10 12:01:47.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-pam_xauth.html 2007-10-01 12:17:01.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.38.�pam_xauth - forward xauth keys between users</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_wheel.html" title="6.37.�pam_wheel - only permit root access to members of group wheel"><link rel="next" href="sag-see-also.html" title="Chapter�7.�See also"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.38.�pam_xauth - forward xauth keys between users</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_wheel.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-see-also.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_xauth"></a>6.38.�pam_xauth - forward xauth keys between users</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_xauth.so</code> [ +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6.38.�pam_xauth - forward xauth keys between users</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"><link rel="prev" href="sag-pam_wheel.html" title="6.37.�pam_wheel - only permit root access to members of group wheel"><link rel="next" href="sag-see-also.html" title="Chapter�7.�See also"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6.38.�pam_xauth - forward xauth keys between users</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_wheel.html">Prev</a>�</td><th width="60%" align="center">Chapter�6.�A reference guide for available modules</th><td width="20%" align="right">�<a accesskey="n" href="sag-see-also.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-pam_xauth"></a>6.38.�pam_xauth - forward xauth keys between users</h2></div></div></div><div class="cmdsynopsis"><p><code class="command">pam_xauth.so</code> [ debug ] [ xauthpath=<em class="replaceable"><code>/path/to/xauth</code></em> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-scurity-issues-wrong.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-scurity-issues-wrong.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-scurity-issues-wrong.html 2007-07-10 12:01:42.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-scurity-issues-wrong.html 2007-10-01 12:16:54.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5.1.�If something goes wrong</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-security-issues.html" title="Chapter�5.�Security issues"><link rel="prev" href="sag-security-issues.html" title="Chapter�5.�Security issues"><link rel="next" href="sag-security-issues-other.html" title="5.2.�Avoid having a weak `other' configuration"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5.1.�If something goes wrong</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-security-issues.html">Prev</a>�</td><th width="60%" align="center">Chapter�5.�Security issues</th><td width="20%" align="right">�<a accesskey="n" href="sag-security-issues-other.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-scurity-issues-wrong"></a>5.1.�If something goes wrong</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5.1.�If something goes wrong</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-security-issues.html" title="Chapter�5.�Security issues"><link rel="prev" href="sag-security-issues.html" title="Chapter�5.�Security issues"><link rel="next" href="sag-security-issues-other.html" title="5.2.�Avoid having a weak `other' configuration"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5.1.�If something goes wrong</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-security-issues.html">Prev</a>�</td><th width="60%" align="center">Chapter�5.�Security issues</th><td width="20%" align="right">�<a accesskey="n" href="sag-security-issues-other.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-scurity-issues-wrong"></a>5.1.�If something goes wrong</h2></div></div></div><p> <span class="emphasis"><em>Linux-PAM</em></span> has the potential to seriously change the security of your system. You can choose to have no security or absolute security (no access diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-security-issues.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-security-issues.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-security-issues.html 2007-07-10 12:01:42.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-security-issues.html 2007-10-01 12:16:55.000000000 +0200 @@ -1 +1 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�5.�Security issues</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-configuration-example.html" title="4.3.�Example configuration file entries"><link rel="next" href="sag-scurity-issues-wrong.html" title="5.1.�If something goes wrong"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�5.�Security issues</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-configuration-example.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-scurity-issues-wrong.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-security-issues"></a>Chapter�5.�Security issues</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="sag-scurity-issues-wrong.html">5.1. If something goes wrong</a></span></dt><dt><span class="section"><a href="sag-security-issues-other.html">5.2. Avoid having a weak `other' configuration</a></span></dt></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="sag-configuration-example.html">Prev</a>�</td><td width="20%" align="center">�</td><td width="40%" align="right">�<a accesskey="n" href="sag-scurity-issues-wrong.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">4.3.�Example configuration file entries�</td><td width="20%" align="center"><a accesskey="h" href="Linux-PAM_SAG.html">Home</a></td><td width="40%" align="right" valign="top">�5.1.�If something goes wrong</td></tr></table></div></body></html> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�5.�Security issues</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-configuration-example.html" title="4.3.�Example configuration file entries"><link rel="next" href="sag-scurity-issues-wrong.html" title="5.1.�If something goes wrong"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�5.�Security issues</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-configuration-example.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-scurity-issues-wrong.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-security-issues"></a>Chapter�5.�Security issues</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="sag-scurity-issues-wrong.html">5.1. If something goes wrong</a></span></dt><dt><span class="section"><a href="sag-security-issues-other.html">5.2. Avoid having a weak `other' configuration</a></span></dt></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="sag-configuration-example.html">Prev</a>�</td><td width="20%" align="center">�</td><td width="40%" align="right">�<a accesskey="n" href="sag-scurity-issues-wrong.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">4.3.�Example configuration file entries�</td><td width="20%" align="center"><a accesskey="h" href="Linux-PAM_SAG.html">Home</a></td><td width="40%" align="right" valign="top">�5.1.�If something goes wrong</td></tr></table></div></body></html> diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-security-issues-other.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-security-issues-other.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-security-issues-other.html 2007-07-10 12:01:42.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-security-issues-other.html 2007-10-01 12:16:55.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5.2.�Avoid having a weak `other' configuration</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-security-issues.html" title="Chapter�5.�Security issues"><link rel="prev" href="sag-scurity-issues-wrong.html" title="5.1.�If something goes wrong"><link rel="next" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5.2.�Avoid having a weak `other' configuration</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-scurity-issues-wrong.html">Prev</a>�</td><th width="60%" align="center">Chapter�5.�Security issues</th><td width="20%" align="right">�<a accesskey="n" href="sag-module-reference.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-security-issues-other"></a>5.2.�Avoid having a weak `other' configuration</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5.2.�Avoid having a weak `other' configuration</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="sag-security-issues.html" title="Chapter�5.�Security issues"><link rel="prev" href="sag-scurity-issues-wrong.html" title="5.1.�If something goes wrong"><link rel="next" href="sag-module-reference.html" title="Chapter�6.�A reference guide for available modules"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5.2.�Avoid having a weak `other' configuration</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-scurity-issues-wrong.html">Prev</a>�</td><th width="60%" align="center">Chapter�5.�Security issues</th><td width="20%" align="right">�<a accesskey="n" href="sag-module-reference.html">Next</a></td></tr></table><hr></div><div class="section" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="sag-security-issues-other"></a>5.2.�Avoid having a weak `other' configuration</h2></div></div></div><p> It is not a good thing to have a weak default (<span class="emphasis"><em>other</em></span>) entry. This service is the default configuration for all PAM aware @@ -6,8 +6,8 @@ vulnerable to attack. </p><p> Here is a sample "other" configuration file. The - <span><strong class="command">pam_deny</strong></span> module will deny access and the - <span><strong class="command">pam_warn</strong></span> module will send a syslog message + <span class="command"><strong>pam_deny</strong></span> module will deny access and the + <span class="command"><strong>pam_warn</strong></span> module will send a syslog message to <span class="emphasis"><em>auth.notice</em></span>: </p><pre class="programlisting"> # diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-see-also.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-see-also.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-see-also.html 2007-07-10 12:01:47.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-see-also.html 2007-10-01 12:17:01.000000000 +0200 @@ -1,4 +1,4 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�7.�See also</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-pam_xauth.html" title="6.38.�pam_xauth - forward xauth keys between users"><link rel="next" href="sag-author.html" title="Chapter�8.�Author/acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�7.�See also</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_xauth.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-author.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-see-also"></a>Chapter�7.�See also</h2></div></div></div><div class="itemizedlist"><ul type="disc"><li><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�7.�See also</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-pam_xauth.html" title="6.38.�pam_xauth - forward xauth keys between users"><link rel="next" href="sag-author.html" title="Chapter�8.�Author/acknowledgments"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�7.�See also</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-pam_xauth.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-author.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-see-also"></a>Chapter�7.�See also</h2></div></div></div><div class="itemizedlist"><ul type="disc"><li><p> The Linux-PAM Application Writers' Guide. </p></li><li><p> The Linux-PAM Module Writers' Guide. diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/html/sag-text-conventions.html new/Linux-PAM-0.99.9.0/doc/sag/html/sag-text-conventions.html --- old/Linux-PAM-0.99.8.1/doc/sag/html/sag-text-conventions.html 2007-07-10 12:01:41.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/html/sag-text-conventions.html 2007-10-01 12:16:54.000000000 +0200 @@ -1,9 +1,9 @@ -<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�2.�Some comments on the text</title><meta name="generator" content="DocBook XSL Stylesheets V1.72.0"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-introductoin.html" title="Chapter�1.�Introduction"><link rel="next" href="sag-overview.html" title="Chapter�3.�Overview"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�2.�Some comments on the text</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-introductoin.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-overview.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-text-conventions"></a>Chapter�2.�Some comments on the text</h2></div></div></div><p> +<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter�2.�Some comments on the text</title><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"><link rel="start" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="up" href="Linux-PAM_SAG.html" title="The Linux-PAM System Administrators' Guide"><link rel="prev" href="sag-introductoin.html" title="Chapter�1.�Introduction"><link rel="next" href="sag-overview.html" title="Chapter�3.�Overview"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter�2.�Some comments on the text</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="sag-introductoin.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="sag-overview.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sag-text-conventions"></a>Chapter�2.�Some comments on the text</h2></div></div></div><p> Before proceeding to read the rest of this document, it should be noted that the text assumes that certain files are placed in certain directories. Where they have been specified, the conventions we adopt here for locating these files are those of the relevant RFC (RFC-86.0, - see <a href="sag-see-also.html" title="Chapter�7.�See also">bibliography"</a>). If you are + see <a class="link" href="sag-see-also.html" title="Chapter�7.�See also">bibliography"</a>). If you are using a distribution of Linux (or some other operating system) that supports PAM but chooses to distribute these files in a diferent way you should be careful when copying examples directly from the text. Files old/Linux-PAM-0.99.8.1/doc/sag/Linux-PAM_SAG.pdf and new/Linux-PAM-0.99.9.0/doc/sag/Linux-PAM_SAG.pdf differ diff -urN --exclude=CVS --exclude=.cvsignore --exclude=.svn --exclude=.svnignore old/Linux-PAM-0.99.8.1/doc/sag/Linux-PAM_SAG.txt new/Linux-PAM-0.99.9.0/doc/sag/Linux-PAM_SAG.txt --- old/Linux-PAM-0.99.8.1/doc/sag/Linux-PAM_SAG.txt 2007-07-10 12:01:25.000000000 +0200 +++ new/Linux-PAM-0.99.9.0/doc/sag/Linux-PAM_SAG.txt 2007-10-01 12:16:39.000000000 +0200 @@ -342,12 +342,12 @@ , acct_expired, session_err, cred_unavail, cred_expired, cred_err, no_module_data, conv_err, authtok_err, authtok_recover_err, authtok_lock_busy, authtok_disable_aging, try_again, ignore, abort, authtok_expired, -module_unknown, bad_item and default. +module_unknown, bad_item, conv_again, incomplete, and default. The last of these, default, implies 'all valueN's not mentioned explicitly. Note, the full list of PAM errors is available in /usr/include/security/ _pam_types.h. The actionN can be: an unsigned integer, n, signifying an action -of 'jump over the next n modules in the stack', or take one of the following +of 'jump over the next n modules in the stack'; or take one of the following forms: ignore @@ -422,7 +422,7 @@ When using this convention, you can include `[' characters inside the string, and if you wish to include a `]' character inside the string that will survive -the argument parsing, you should use `\['. In other words: +the argument parsing, you should use `\]'. In other words: [..[..\]..] --> ..[..].. @@ -2148,7 +2148,7 @@ maxlogins - maximum number of logins for this user + maximum number of logins for this user except for this with uid=0 maxsyslogins @@ -2280,7 +2280,7 @@ 6.16. pam_listfile - deny or allow services based on an arbitrary file pam_listfile.so item=[tty|user|rhost|ruser|group|shell] sense=[allow|deny] file -=/path/filename onerr=[succeed|fail] [ apply=[user|@group] ] +=/path/filename onerr=[succeed|fail] [ apply=[user|@group] ] [ quiet ] 6.16.1. DESCRIPTION @@ -2338,6 +2338,11 @@ item=[user|ruser|group] this oes not make sense, but for item=[tty|rhost| shell] it have a meaning. +quiet + + Do not treat service refusals or missing list files as errors that need to + be logged. + 6.16.3. MODULE SERVICES PROVIDED The services auth, account, password and session are supported. ++++++ Linux-PAM-0.99.8.1-docs.tar.bz2 -> Linux-PAM-0.99.9.0.tar.bz2 ++++++ ++++ 216557 lines of diff (skipped) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org