pam_usertype(8)

1PAM_USERTYPE(8)                    Linux-PAM                   PAM_USERTYPE(8)
2
3
4

NAME

6       pam_usertype - check if the authenticated user is a system or regular
7       account
8

SYNOPSIS

10       pam_usertype.so [flag...] {condition}
11

DESCRIPTION

13       pam_usertype.so is designed to succeed or fail authentication based on
14       type of the account of the authenticated user. The type of the account
15       is decided with help of SYS_UID_MIN and SYS_UID_MAX settings in
16       /etc/login.defs. One use is to select whether to load other modules
17       based on this test.
18
19       The module should be given only one condition as module argument.
20       Authentication will succeed only if the condition is met.
21

OPTIONS

23       The following flags are supported:
24
25       use_uid
26           Evaluate conditions using the account of the user whose UID the
27           application is running under instead of the user being
28           authenticated.
29
30       audit
31           Log unknown users to the system log.
32
33       Available conditions are:
34
35       issystem
36           Succeed if the user is a system user.
37
38       isregular
39           Succeed if the user is a regular user.
40

MODULE TYPES PROVIDED

42       All module types (account, auth, password and session) are provided.
43

RETURN VALUES

45       PAM_SUCCESS
46           The condition was true.
47
48       PAM_AUTH_ERR
49           The condition was false.
50
51       PAM_SERVICE_ERR
52           A service error occurred or the arguments can't be parsed
53           correctly.
54
55       PAM_USER_UNKNOWN
56           User was not found.
57

EXAMPLES

59       Skip remaining modules if the user is a system user:
60
61           account sufficient pam_usertype.so issystem
62
63

AUTHOR

68       Pavel Březina <pbrezina@redhat.com>
69
70
71
72Linux-PAM                         03/09/2020                   PAM_USERTYPE(8)