1PAM_DEBUG(8) Linux-PAM Manual PAM_DEBUG(8)
2
3
4
6 pam_debug - PAM module to debug the PAM stack
7
9 pam_debug.so [auth=value] [cred=value] [acct=value]
10 [prechauthtok=value] [chauthtok=value] [auth=value]
11 [open_session=value] [close_session=value]
12
14 The pam_debug PAM module is intended as a debugging aide for
15 determining how the PAM stack is operating. This module returns what
16 its module arguments tell it to return.
17
19 auth=value
20 The pam_sm_authenticate(3) function will return value.
21
22 cred=value
23 The pam_sm_setcred(3) function will return value.
24
25 acct=value
26 The pam_sm_acct_mgmt(3) function will return value.
27
28 prechauthtok=value
29 The pam_sm_chauthtok(3) function will return value if the
30 PAM_PRELIM_CHECK flag is set.
31
32 chauthtok=value
33 The pam_sm_chauthtok(3) function will return value if the
34 PAM_PRELIM_CHECK flag is not set.
35
36 open_session=value
37 The pam_sm_open_session(3) function will return value.
38
39 close_session=value
40 The pam_sm_close_session(3) function will return value.
41
42 Where value can be one of: success, open_err, symbol_err, service_err,
43 system_err, buf_err, perm_denied, auth_err, cred_insufficient,
44 authinfo_unavail, user_unknown, maxtries, new_authtok_reqd,
45 acct_expired, session_err, cred_unavail, cred_expired, cred_err,
46 no_module_data, conv_err, authtok_err, authtok_recover_err,
47 authtok_lock_busy, authtok_disable_aging, try_again, ignore, abort,
48 authtok_expired, module_unknown, bad_item, conv_again, incomplete.
49
51 All module types (auth, account, password and session) are provided.
52
54 PAM_SUCCESS
55 Default return code if no other value was specified, else specified
56 return value.
57
59 auth requisite pam_permit.so
60 auth [success=2 default=ok] pam_debug.so auth=perm_denied cred=success
61 auth [default=reset] pam_debug.so auth=success cred=perm_denied
62 auth [success=done default=die] pam_debug.so
63 auth optional pam_debug.so auth=perm_denied cred=perm_denied
64 auth sufficient pam_debug.so auth=success cred=success
65
66
68 pam.conf(5), pam.d(5), pam(8)
69
71 pam_debug was written by Andrew G. Morgan <morgan@kernel.org>.
72
73
74
75Linux-PAM 05/07/2023 PAM_DEBUG(8)