README 1.9 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364
  1. pam_debug — PAM module to debug the PAM stack
  2. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  3. DESCRIPTION
  4. The pam_debug PAM module is intended as a debugging aide for determining how
  5. the PAM stack is operating. This module returns what its module arguments tell
  6. it to return.
  7. OPTIONS
  8. auth=value
  9. The pam_sm_authenticate(3) function will return value.
  10. cred=value
  11. The pam_sm_setcred(3) function will return value.
  12. acct=value
  13. The pam_sm_acct_mgmt(3) function will return value.
  14. prechauthtok=value
  15. The pam_sm_chauthtok(3) function will return value if the PAM_PRELIM_CHECK
  16. flag is set.
  17. chauthtok=value
  18. The pam_sm_chauthtok(3) function will return value if the PAM_PRELIM_CHECK
  19. flag is not set.
  20. open_session=value
  21. The pam_sm_open_session(3) function will return value.
  22. close_session=value
  23. The pam_sm_close_session(3) function will return value.
  24. Where value can be one of: success, open_err, symbol_err, service_err,
  25. system_err, buf_err, perm_denied, auth_err, cred_insufficient,
  26. authinfo_unavail, user_unknown, maxtries, new_authtok_reqd, acct_expired,
  27. session_err, cred_unavail, cred_expired, cred_err, no_module_data, conv_err,
  28. authtok_err, authtok_recover_err, authtok_lock_busy, authtok_disable_aging,
  29. try_again, ignore, abort, authtok_expired, module_unknown, bad_item,
  30. conv_again, incomplete.
  31. EXAMPLES
  32. auth requisite pam_permit.so
  33. auth [success=2 default=ok] pam_debug.so auth=perm_denied cred=success
  34. auth [default=reset] pam_debug.so auth=success cred=perm_denied
  35. auth [success=done default=die] pam_debug.so
  36. auth optional pam_debug.so auth=perm_denied cred=perm_denied
  37. auth sufficient pam_debug.so auth=success cred=success
  38. AUTHOR
  39. pam_debug was written by Andrew G. Morgan <morgan@kernel.org>.