pam_debug.8.xml 7.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231
  1. <?xml version="1.0" encoding='UTF-8'?>
  2. <!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.3//EN"
  3. "http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd">
  4. <refentry id="pam_debug">
  5. <refmeta>
  6. <refentrytitle>pam_debug</refentrytitle>
  7. <manvolnum>8</manvolnum>
  8. <refmiscinfo class="sectdesc">Linux-PAM Manual</refmiscinfo>
  9. </refmeta>
  10. <refnamediv id="pam_debug-name">
  11. <refname>pam_debug</refname>
  12. <refpurpose>PAM module to debug the PAM stack</refpurpose>
  13. </refnamediv>
  14. <refsynopsisdiv>
  15. <cmdsynopsis id="pam_debug-cmdsynopsis">
  16. <command>pam_debug.so</command>
  17. <arg choice="opt">
  18. auth=<replaceable>value</replaceable>
  19. </arg>
  20. <arg choice="opt">
  21. cred=<replaceable>value</replaceable>
  22. </arg>
  23. <arg choice="opt">
  24. acct=<replaceable>value</replaceable>
  25. </arg>
  26. <arg choice="opt">
  27. prechauthtok=<replaceable>value</replaceable>
  28. </arg>
  29. <arg choice="opt">
  30. chauthtok=<replaceable>value</replaceable>
  31. </arg>
  32. <arg choice="opt">
  33. auth=<replaceable>value</replaceable>
  34. </arg>
  35. <arg choice="opt">
  36. open_session=<replaceable>value</replaceable>
  37. </arg>
  38. <arg choice="opt">
  39. close_session=<replaceable>value</replaceable>
  40. </arg>
  41. </cmdsynopsis>
  42. </refsynopsisdiv>
  43. <refsect1 id="pam_debug-description">
  44. <title>DESCRIPTION</title>
  45. <para>
  46. The pam_debug PAM module is intended as a debugging aide for
  47. determining how the PAM stack is operating. This module returns
  48. what its module arguments tell it to return.
  49. </para>
  50. </refsect1>
  51. <refsect1 id="pam_debug-options">
  52. <title>OPTIONS</title>
  53. <variablelist>
  54. <varlistentry>
  55. <term>
  56. <option>auth=<replaceable>value</replaceable></option>
  57. </term>
  58. <listitem>
  59. <para>
  60. The
  61. <citerefentry>
  62. <refentrytitle>pam_sm_authenticate</refentrytitle><manvolnum>3</manvolnum>
  63. </citerefentry> function will return
  64. <replaceable>value</replaceable>.
  65. </para>
  66. </listitem>
  67. </varlistentry>
  68. <varlistentry>
  69. <term>
  70. <option>cred=<replaceable>value</replaceable></option>
  71. </term>
  72. <listitem>
  73. <para>
  74. The
  75. <citerefentry>
  76. <refentrytitle>pam_sm_setcred</refentrytitle><manvolnum>3</manvolnum>
  77. </citerefentry> function will return
  78. <replaceable>value</replaceable>.
  79. </para>
  80. </listitem>
  81. </varlistentry>
  82. <varlistentry>
  83. <term>
  84. <option>acct=<replaceable>value</replaceable></option>
  85. </term>
  86. <listitem>
  87. <para>
  88. The
  89. <citerefentry>
  90. <refentrytitle>pam_sm_acct_mgmt</refentrytitle><manvolnum>3</manvolnum>
  91. </citerefentry> function will return
  92. <replaceable>value</replaceable>.
  93. </para>
  94. </listitem>
  95. </varlistentry>
  96. <varlistentry>
  97. <term>
  98. <option>prechauthtok=<replaceable>value</replaceable></option>
  99. </term>
  100. <listitem>
  101. <para>
  102. The
  103. <citerefentry>
  104. <refentrytitle>pam_sm_chauthtok</refentrytitle><manvolnum>3</manvolnum>
  105. </citerefentry> function will return
  106. <replaceable>value</replaceable> if the
  107. <emphasis>PAM_PRELIM_CHECK</emphasis> flag is set.
  108. </para>
  109. </listitem>
  110. </varlistentry>
  111. <varlistentry>
  112. <term>
  113. <option>chauthtok=<replaceable>value</replaceable></option>
  114. </term>
  115. <listitem>
  116. <para>
  117. The
  118. <citerefentry>
  119. <refentrytitle>pam_sm_chauthtok</refentrytitle><manvolnum>3</manvolnum>
  120. </citerefentry> function will return
  121. <replaceable>value</replaceable> if the
  122. <emphasis>PAM_PRELIM_CHECK</emphasis> flag is
  123. <emphasis remap='B'>not</emphasis> set.
  124. </para>
  125. </listitem>
  126. </varlistentry>
  127. <varlistentry>
  128. <term>
  129. <option>open_session=<replaceable>value</replaceable></option>
  130. </term>
  131. <listitem>
  132. <para>
  133. The
  134. <citerefentry>
  135. <refentrytitle>pam_sm_open_session</refentrytitle><manvolnum>3</manvolnum>
  136. </citerefentry> function will return
  137. <replaceable>value</replaceable>.
  138. </para>
  139. </listitem>
  140. </varlistentry>
  141. <varlistentry>
  142. <term>
  143. <option>close_session=<replaceable>value</replaceable></option>
  144. </term>
  145. <listitem>
  146. <para>
  147. The
  148. <citerefentry>
  149. <refentrytitle>pam_sm_close_session</refentrytitle><manvolnum>3</manvolnum>
  150. </citerefentry> function will return
  151. <replaceable>value</replaceable>.
  152. </para>
  153. </listitem>
  154. </varlistentry>
  155. </variablelist>
  156. <para>
  157. Where <replaceable>value</replaceable> can be one of: success,
  158. open_err, symbol_err, service_err, system_err, buf_err, perm_denied,
  159. auth_err, cred_insufficient, authinfo_unavail, user_unknown,
  160. maxtries, new_authtok_reqd, acct_expired, session_err, cred_unavail,
  161. cred_expired, cred_err, no_module_data, conv_err, authtok_err,
  162. authtok_recover_err, authtok_lock_busy, authtok_disable_aging,
  163. try_again, ignore, abort, authtok_expired, module_unknown,
  164. bad_item, conv_again, incomplete.
  165. </para>
  166. </refsect1>
  167. <refsect1 id="pam_debug-types">
  168. <title>MODULE TYPES PROVIDED</title>
  169. <para>
  170. All module types (<option>auth</option>, <option>account</option>,
  171. <option>password</option> and <option>session</option>) are provided.
  172. </para>
  173. </refsect1>
  174. <refsect1 id='pam_debug-return_values'>
  175. <title>RETURN VALUES</title>
  176. <variablelist>
  177. <varlistentry>
  178. <term>PAM_SUCCESS</term>
  179. <listitem>
  180. <para>
  181. Default return code if no other value was specified,
  182. else specified return value.
  183. </para>
  184. </listitem>
  185. </varlistentry>
  186. </variablelist>
  187. </refsect1>
  188. <refsect1 id='pam_debug-examples'>
  189. <title>EXAMPLES</title>
  190. <programlisting>
  191. auth requisite pam_permit.so
  192. auth [success=2 default=ok] pam_debug.so auth=perm_denied cred=success
  193. auth [default=reset] pam_debug.so auth=success cred=perm_denied
  194. auth [success=done default=die] pam_debug.so
  195. auth optional pam_debug.so auth=perm_denied cred=perm_denied
  196. auth sufficient pam_debug.so auth=success cred=success
  197. </programlisting>
  198. </refsect1>
  199. <refsect1 id='pam_debug-see_also'>
  200. <title>SEE ALSO</title>
  201. <para>
  202. <citerefentry>
  203. <refentrytitle>pam.conf</refentrytitle><manvolnum>5</manvolnum>
  204. </citerefentry>,
  205. <citerefentry>
  206. <refentrytitle>pam.d</refentrytitle><manvolnum>5</manvolnum>
  207. </citerefentry>,
  208. <citerefentry>
  209. <refentrytitle>pam</refentrytitle><manvolnum>8</manvolnum>
  210. </citerefentry>
  211. </para>
  212. </refsect1>
  213. <refsect1 id='pam_debug-author'>
  214. <title>AUTHOR</title>
  215. <para>
  216. pam_debug was written by Andrew G. Morgan &lt;morgan@kernel.org&gt;.
  217. </para>
  218. </refsect1>
  219. </refentry>