pam_rhosts.8 3.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128
  1. '\" t
  2. .\" Title: pam_rhosts
  3. .\" Author: [see the "AUTHOR" section]
  4. .\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
  5. .\" Date: 09/03/2021
  6. .\" Manual: Linux-PAM Manual
  7. .\" Source: Linux-PAM Manual
  8. .\" Language: English
  9. .\"
  10. .TH "PAM_RHOSTS" "8" "09/03/2021" "Linux-PAM Manual" "Linux\-PAM Manual"
  11. .\" -----------------------------------------------------------------
  12. .\" * Define some portability stuff
  13. .\" -----------------------------------------------------------------
  14. .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  15. .\" http://bugs.debian.org/507673
  16. .\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
  17. .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  18. .ie \n(.g .ds Aq \(aq
  19. .el .ds Aq '
  20. .\" -----------------------------------------------------------------
  21. .\" * set default formatting
  22. .\" -----------------------------------------------------------------
  23. .\" disable hyphenation
  24. .nh
  25. .\" disable justification (adjust text to left margin only)
  26. .ad l
  27. .\" -----------------------------------------------------------------
  28. .\" * MAIN CONTENT STARTS HERE *
  29. .\" -----------------------------------------------------------------
  30. .SH "NAME"
  31. pam_rhosts \- The rhosts PAM module
  32. .SH "SYNOPSIS"
  33. .HP \w'\fBpam_rhosts\&.so\fR\ 'u
  34. \fBpam_rhosts\&.so\fR
  35. .SH "DESCRIPTION"
  36. .PP
  37. This module performs the standard network authentication for services, as used by traditional implementations of
  38. \fBrlogin\fR
  39. and
  40. \fBrsh\fR
  41. etc\&.
  42. .PP
  43. The authentication mechanism of this module is based on the contents of two files;
  44. /etc/hosts\&.equiv
  45. (or and
  46. ~/\&.rhosts\&. Firstly, hosts listed in the former file are treated as equivalent to the localhost\&. Secondly, entries in the user\*(Aqs own copy of the latter file is used to map "\fIremote\-host remote\-user\fR" pairs to that user\*(Aqs account on the current host\&. Access is granted to the user if their host is present in
  47. /etc/hosts\&.equiv
  48. and their remote account is identical to their local one, or if their remote account has an entry in their personal configuration file\&.
  49. .PP
  50. The module authenticates a remote user (internally specified by the item
  51. \fIPAM_RUSER\fR
  52. connecting from the remote host (internally specified by the item
  53. \fBPAM_RHOST\fR)\&. Accordingly, for applications to be compatible this authentication module they must set these items prior to calling
  54. \fBpam_authenticate()\fR\&. The module is not capable of independently probing the network connection for such information\&.
  55. .SH "OPTIONS"
  56. .PP
  57. \fBdebug\fR
  58. .RS 4
  59. Print debug information\&.
  60. .RE
  61. .PP
  62. \fBsilent\fR
  63. .RS 4
  64. Don\*(Aqt print informative messages\&.
  65. .RE
  66. .PP
  67. \fBsuperuser=\fR\fB\fIaccount\fR\fR
  68. .RS 4
  69. Handle
  70. \fIaccount\fR
  71. as root\&.
  72. .RE
  73. .SH "MODULE TYPES PROVIDED"
  74. .PP
  75. Only the
  76. \fBauth\fR
  77. module type is provided\&.
  78. .SH "RETURN VALUES"
  79. .PP
  80. PAM_AUTH_ERR
  81. .RS 4
  82. The remote host, remote user name or the local user name couldn\*(Aqt be determined or access was denied by
  83. \&.rhosts
  84. file\&.
  85. .RE
  86. .PP
  87. PAM_USER_UNKNOWN
  88. .RS 4
  89. User is not known to system\&.
  90. .RE
  91. .SH "EXAMPLES"
  92. .PP
  93. To grant a remote user access by
  94. /etc/hosts\&.equiv
  95. or
  96. \&.rhosts
  97. for
  98. \fBrsh\fR
  99. add the following lines to
  100. /etc/pam\&.d/rsh:
  101. .sp
  102. .if n \{\
  103. .RS 4
  104. .\}
  105. .nf
  106. #%PAM\-1\&.0
  107. #
  108. auth required pam_rhosts\&.so
  109. auth required pam_nologin\&.so
  110. auth required pam_env\&.so
  111. auth required pam_unix\&.so
  112. .fi
  113. .if n \{\
  114. .RE
  115. .\}
  116. .sp
  117. .SH "SEE ALSO"
  118. .PP
  119. \fBrootok\fR(3),
  120. \fBhosts.equiv\fR(5),
  121. \fBrhosts\fR(5),
  122. \fBpam.conf\fR(5),
  123. \fBpam.d\fR(5),
  124. \fBpam\fR(8)
  125. .SH "AUTHOR"
  126. .PP
  127. pam_rhosts was written by Thorsten Kukuk <kukuk@thkukuk\&.de>