pam_stress(8)

1PAM_STRESS(8)                  Linux-PAM Manual                  PAM_STRESS(8)
2
3
4

NAME

6       pam_stress - The stress-testing PAM module
7

SYNOPSIS

9       pam_stress.so [debug] [no_warn] [use_first_pass] [try_first_pass]
10                     [rootok] [expired] [fail_1] [fail_2] [prelim] [required]
11

DESCRIPTION

13       The pam_stress PAM module is mainly intended to give the impression of
14       failing as a fully functioning module might.
15

OPTIONS

17       debug
18           Put lots of information in syslog. *NOTE* this option writes
19           passwords to syslog, so don't use anything sensitive when testing.
20
21       no_warn
22           Do not give warnings about things (otherwise warnings are issued
23           via the conversation function)
24
25       use_first_pass
26           Do not prompt for a password, for pam_sm_authentication function
27           just use item PAM_AUTHTOK.
28
29       try_first_pass
30           Do not prompt for a password unless there has been no previous
31           authentication token (item PAM_AUTHTOK is NULL)
32
33       rootok
34           This is intended for the pam_sm_chauthtok function and it instructs
35           this function to permit root to change the user's password without
36           entering the old password.
37
38       expired
39           An argument intended for the account and chauthtok module parts. It
40           instructs the module to act as if the user's password has expired
41
42       fail_1
43           This instructs the module to make its first function fail.
44
45       fail_2
46           This instructs the module to make its second function (if there is
47           one) fail.
48
49       prelim
50           For pam_sm_chauthtok, means fail on PAM_PRELIM_CHECK.
51
52       required
53           For pam_sm_chauthtok, means fail if the user hasn't already been
54           authenticated by this module. (See stress_new_pwd data string in
55           the NOTES.)
56

MODULE TYPES PROVIDED

58       All module types (auth, account, password and session) are provided.
59

RETURN VALUES

61       PAM_BUF_ERR
62           Memory buffer error.
63
64       PAM_PERM_DENIED
65           Permission denied.
66
67       PAM_AUTH_ERR
68           Access to the system was denied.
69
70       PAM_CONV_ERR
71           Conversation failure.
72
73       PAM_SUCCESS
74           The function passes all checks.
75
76       PAM_USER_UNKNOWN
77           The user is not known to the system.
78
79       PAM_CRED_ERR
80           Failure involving user credentials.
81
82       PAM_NEW_AUTHTOK_REQD
83           Authentication token is no longer valid; new one required.
84
85       PAM_SESSION_ERR
86           Session failure.
87
88       PAM_TRY_AGAIN
89           Failed preliminary check by service.
90
91       PAM_AUTHTOK_LOCK_BUSY
92           Authentication token lock busy.
93
94       PAM_AUTHTOK_ERR
95           Authentication token manipulation error.
96
97       PAM_SYSTEM_ERR
98           System error.
99

NOTES

101       This module uses the stress_new_pwd data string which tells
102       pam_sm_chauthtok that pam_sm_acct_mgmt says we need a new password. The
103       only possible value for this data string is 'yes'.
104

EXAMPLES

106           #%PAM-1.0
107           #
108           # Any of the following will suffice
109           account  required pam_stress.so
110           auth     required pam_stress.so
111           password required pam_stress.so
112           session  required pam_stress.so
113
114

AUTHORS

119       The pam_stress PAM module was developed by Andrew Morgan
120       <morgan@linux.kernel.org>. The man page for pam_stress was written by
121       Lucas Ramage <ramage.lucas@protonmail.com>.
122
123
124
125Linux-PAM Manual                  09/03/2021                     PAM_STRESS(8)