pam_time.8.xml 5.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198
  1. <?xml version="1.0" encoding="ISO-8859-1"?>
  2. <!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.1.2//EN"
  3. "http://www.oasis-open.org/docbook/xml/4.1.2/docbookx.dtd">
  4. <refentry id='pam_time'>
  5. <refmeta>
  6. <refentrytitle>pam_time</refentrytitle>
  7. <manvolnum>8</manvolnum>
  8. <refmiscinfo class='setdesc'>Linux-PAM Manual</refmiscinfo>
  9. </refmeta>
  10. <refnamediv id='pam_time-name'>
  11. <refname>pam_time</refname>
  12. <refpurpose>
  13. PAM module for time control access
  14. </refpurpose>
  15. </refnamediv>
  16. <!-- body begins here -->
  17. <refsynopsisdiv>
  18. <cmdsynopsis id="pam_time-cmdsynopsis">
  19. <command>pam_time.so</command>
  20. <arg choice="opt">
  21. conffile=conf-file
  22. </arg>
  23. <arg choice="opt">
  24. debug
  25. </arg>
  26. <arg choice="opt">
  27. noaudit
  28. </arg>
  29. </cmdsynopsis>
  30. </refsynopsisdiv>
  31. <refsect1 id="pam_time-description">
  32. <title>DESCRIPTION</title>
  33. <para>
  34. The pam_time PAM module does not authenticate the user, but instead
  35. it restricts access to a system and or specific applications at
  36. various times of the day and on specific days or over various
  37. terminal lines. This module can be configured to deny access to
  38. (individual) users based on their name, the time of day, the day of
  39. week, the service they are applying for and their terminal from which
  40. they are making their request.
  41. </para>
  42. <para>
  43. By default rules for time/port access are taken from config file
  44. <filename>/etc/security/time.conf</filename>.
  45. An alternative file can be specified with the <emphasis>conffile</emphasis> option.
  46. </para>
  47. <para>
  48. If Linux PAM is compiled with audit support the module will report
  49. when it denies access.
  50. </para>
  51. </refsect1>
  52. <refsect1 id="pam_time-options">
  53. <title>OPTIONS</title>
  54. <variablelist>
  55. <varlistentry>
  56. <term>
  57. <option>conffile=/path/to/time.conf</option>
  58. </term>
  59. <listitem>
  60. <para>
  61. Indicate an alternative time.conf style configuration file to override the default.
  62. </para>
  63. </listitem>
  64. </varlistentry>
  65. <varlistentry>
  66. <term>
  67. <option>debug</option>
  68. </term>
  69. <listitem>
  70. <para>
  71. Some debug information is printed with
  72. <citerefentry><refentrytitle>syslog</refentrytitle><manvolnum>3</manvolnum></citerefentry>.
  73. </para>
  74. </listitem>
  75. </varlistentry>
  76. <varlistentry>
  77. <term>
  78. <option>noaudit</option>
  79. </term>
  80. <listitem>
  81. <para>
  82. Do not report logins at disallowed time to the audit subsystem.
  83. </para>
  84. </listitem>
  85. </varlistentry>
  86. </variablelist>
  87. </refsect1>
  88. <refsect1 id="pam_time-types">
  89. <title>MODULE TYPES PROVIDED</title>
  90. <para>
  91. Only the <option>account</option> type is provided.
  92. </para>
  93. </refsect1>
  94. <refsect1 id="pam_time-return_values">
  95. <title>RETURN VALUES</title>
  96. <variablelist>
  97. <varlistentry>
  98. <term>PAM_SUCCESS</term>
  99. <listitem>
  100. <para>
  101. Access was granted.
  102. </para>
  103. </listitem>
  104. </varlistentry>
  105. <varlistentry>
  106. <term>PAM_ABORT</term>
  107. <listitem>
  108. <para>
  109. Not all relevant data could be gotten.
  110. </para>
  111. </listitem>
  112. </varlistentry>
  113. <varlistentry>
  114. <term>PAM_BUF_ERR</term>
  115. <listitem>
  116. <para>
  117. Memory buffer error.
  118. </para>
  119. </listitem>
  120. </varlistentry>
  121. <varlistentry>
  122. <term>PAM_PERM_DENIED</term>
  123. <listitem>
  124. <para>
  125. Access was not granted.
  126. </para>
  127. </listitem>
  128. </varlistentry>
  129. <varlistentry>
  130. <term>PAM_USER_UNKNOWN</term>
  131. <listitem>
  132. <para>
  133. The user is not known to the system.
  134. </para>
  135. </listitem>
  136. </varlistentry>
  137. </variablelist>
  138. </refsect1>
  139. <refsect1 id="pam_time-files">
  140. <title>FILES</title>
  141. <variablelist>
  142. <varlistentry>
  143. <term><filename>/etc/security/time.conf</filename></term>
  144. <listitem>
  145. <para>Default configuration file</para>
  146. </listitem>
  147. </varlistentry>
  148. </variablelist>
  149. </refsect1>
  150. <refsect1 id='pam_time-examples'>
  151. <title>EXAMPLES</title>
  152. <programlisting>
  153. #%PAM-1.0
  154. #
  155. # apply pam_time accounting to login requests
  156. #
  157. login account required pam_time.so
  158. </programlisting>
  159. </refsect1>
  160. <refsect1 id="pam_time-see_also">
  161. <title>SEE ALSO</title>
  162. <para>
  163. <citerefentry>
  164. <refentrytitle>time.conf</refentrytitle><manvolnum>5</manvolnum>
  165. </citerefentry>,
  166. <citerefentry>
  167. <refentrytitle>pam.d</refentrytitle><manvolnum>5</manvolnum>
  168. </citerefentry>,
  169. <citerefentry>
  170. <refentrytitle>pam</refentrytitle><manvolnum>8</manvolnum>
  171. </citerefentry>.
  172. </para>
  173. </refsect1>
  174. <refsect1 id="pam_time-authors">
  175. <title>AUTHOR</title>
  176. <para>
  177. pam_time was written by Andrew G. Morgan &lt;morgan@kernel.org&gt;.
  178. </para>
  179. </refsect1>
  180. </refentry>