pam_allow(5)

1pam_allow(5)          Standards, Environments, and Macros         pam_allow(5)
2
3
4

NAME

6       pam_allow  -  PAM authentication, account, session and password manage‐
7       ment PAM module to allow operations
8

SYNOPSIS

10       pam_allow.so.1
11
12

DESCRIPTION

14       The pam_allow module implements all the PAM  service  module  functions
15       and returns PAM_SUCCESS for all calls. Opposite functionality is avail‐
16       able in the pam_deny(5) module.
17
18
19       Proper Solaris authentication operation  requires  pam_unix_cred(5)  be
20       stacked above pam_allow.
21
22
23       The following options are interpreted:
24
25       debug    Provides  syslog(3C)  debugging  information at the LOG_AUTH |
26                LOG_DEBUG level.
27
28

ERRORS

30       PAM_SUCCESS is always returned.
31

EXAMPLES

33       Example 1 Allowing ssh none
34
35
36       The following example is a pam.conf fragment that illustrates a  sample
37       for allowing ssh none authentication:
38
39
40         sshd-none  auth    required      pam_unix_cred.so.1
41         sshd-none  auth    sufficient    pam_allow.so.1
42         sshd-none  account sufficient    pam_allow.so.1
43         sshd-none  session sufficient    pam_allow.so.1
44         sshd-none  password sufficient   pam_allow.so.1
45
46
47       Example 2 Allowing Kiosk Automatic Login Service
48
49
50       The following is example is a pam.conf fragment that illustrates a sam‐
51       ple for allowing gdm kiosk auto login:
52
53
54         gdm-autologin auth  required    pam_unix_cred.so.1
55         gdm-autologin auth  sufficient  pam_allow.so.1
56
57

ATTRIBUTES

59       See attributes(5) for descriptions of the following attributes:
60
61
62
63
64       ┌─────────────────────────────┬─────────────────────────────┐
65       │      ATTRIBUTE TYPE         │      ATTRIBUTE VALUE        │
66       ├─────────────────────────────┼─────────────────────────────┤
67       │Interface Stability          │Stable                       │
68       ├─────────────────────────────┼─────────────────────────────┤
69       │MT Level                     │MT-Safe with exceptions      │
70       └─────────────────────────────┴─────────────────────────────┘
71

NOTES

77       The  interfaces  in libpam(3LIB) are MT-Safe only if each thread within
78       the multi-threaded application uses its own PAM handle.
79
80
81       This module is intended to be used to either allow access  to  specific
82       services names, or to all service names not specified (by specifying it
83       as the default service stack).
84
85
86
87SunOS 5.11                        25 Aug 2005                     pam_allow(5)