pam_localuser(8)

1PAM_LOCALUSER(8)               Linux-PAM Manual               PAM_LOCALUSER(8)
2
3
4

NAME

6       pam_localuser - require users to be listed in /etc/passwd
7

SYNOPSIS

9       pam_localuser.so [debug] [file=/path/passwd]
10

DESCRIPTION

12       pam_localuser is a PAM module to help implementing site-wide login
13       policies, where they typically include a subset of the network's users
14       and a few accounts that are local to a particular workstation. Using
15       pam_localuser and pam_wheel or pam_listfile is an effective way to
16       restrict access to either local users and/or a subset of the network's
17       users.
18
19       This could also be implemented using pam_listfile.so and a very short
20       awk script invoked by cron, but it's common enough to have been
21       separated out.
22

OPTIONS

24       debug
25           Print debug information.
26
27       file=/path/passwd
28           Use a file other than /etc/passwd.
29

MODULE TYPES PROVIDED

31       All module types (account, auth, password and session) are provided.
32

RETURN VALUES

34       PAM_SUCCESS
35           The new localuser was set successfully.
36
37       PAM_BUF_ERR
38           Memory buffer error.
39
40       PAM_CONV_ERR
41           The conversation method supplied by the application failed to
42           obtain the username.
43
44       PAM_INCOMPLETE
45           The conversation method supplied by the application returned
46           PAM_CONV_AGAIN.
47
48       PAM_SERVICE_ERR
49           The user name is not valid or the passwd file is unavailable.
50
51       PAM_PERM_DENIED
52           The user is not listed in the passwd file.
53

EXAMPLES

55       Add the following lines to /etc/pam.d/su to allow only local users or
56       group wheel to use su.
57
58           account sufficient pam_localuser.so
59           account required pam_wheel.so
60
61
62

FILES

64       /etc/passwd
65           Local user account information.
66

AUTHOR

71       pam_localuser was written by Nalin Dahyabhai <nalin@redhat.com>.
72
73
74
75Linux-PAM Manual                  09/03/2021                  PAM_LOCALUSER(8)