PAM_WHEEL(8) System Manager's Manual PAM_WHEEL(8) NAME pam_wheel -- Wheel PAM module SYNOPSIS [service-name] module-type control-flag pam_wheel [options] DESCRIPTION The Wheel authentication service module for PAM, pam_wheel provides func- tionality for only one PAM category: authentication. In terms of the module-type parameter, this is the "auth" feature. It also provides a null function for session management. Wheel Authentication Module The Wheel authentication component (pam_sm_authenticate()), permit authen- tication to members of a group, which defaults to "wheel". The following options may be passed to the authentication module: debug syslog(3) debugging information at LOG_DEBUG level. no_warn suppress warning messages to the user. These messages in- clude reasons why the user's authentication attempt was declined. auth_as_self check for "wheel" membership against the current login name (given by getlogin(2)). trust return PAM_SUCCESS instead of PAM_IGNORE if the user is a member of the group (default is "wheel"). deny invert the operation if the user is a member of the (de- fault "wheel") group. Returns failure instead of success. Mainly of use with the group=foo option. group=foo checking for membership of group foo instead of the de- fault group "wheel". noroot_ok return PAM_SUCCESS instead of PAM_IGNORE if the user is authenticating to a user that is not the superuser. exempt_if_empty return PAM_IGNORE if the specified group (default group of "wheel") is empty, providing traditional BSD su(8) seman- tics permitting any user to "su" if the wheel group is empty. SEE ALSO getlogin(2), syslog(3), group(5), pam.conf(5), pam(8) FreeBSD 5.0 July 8, 2001 PAM_WHEEL(8)
NAME | SYNOPSIS | DESCRIPTION | SEE ALSO
Want to link to this manual page? Use this URL:
<https://man.FreeBSD.org/cgi/man.cgi?query=pam_wheel&sektion=8&manpath=FreeBSD+5.0-RELEASE>