FreeBSD Manual Pages
PAM_WHEEL(8) BSD System Manager's Manual PAM_WHEEL(8) NAME pam_wheel -- Wheel PAM module SYNOPSIS [service-name] module-type control-flag pam_wheel [options] DESCRIPTION The Wheel authentication service module for PAM, pam_wheel provides func- tionality for only one PAM category: authentication. In terms of the module-type parameter, this is the "auth" feature. It also provides a null function for session management. Wheel Authentication Module The Wheel authentication component (pam_sm_authenticate()), permit au- thentication to members of a group, which defaults to "wheel". The following options may be passed to the authentication module: debug syslog(3) debugging information at LOG_DEBUG level. no_warn suppress warning messages to the user. These messages include reasons why the user's authentication attempt was declined. auth_as_self check for "wheel" membership against the current login name (given by getlogin(2)). trust return PAM_SUCCESS instead of PAM_IGNORE if the user is a member of the group (default is "wheel"). deny invert the operation if the user is a member of the (de- fault "wheel") group. Returns failure instead of suc- cess. Mainly of use with the group=foo option. group=foo checking for membership of group foo instead of the de- fault group "wheel". noroot_ok return PAM_SUCCESS instead of PAM_IGNORE if the user is authenticating to a user that is not the superuser. exempt_if_empty return PAM_IGNORE if the specified group (default group of "wheel") is empty, providing traditional BSD su(8) semantics permitting any user to "su" if the wheel group is empty. SEE ALSO getlogin(2), syslog(3), group(5), pam.conf(5), pam(8) BSD July 8, 2001 BSD
NAME | SYNOPSIS | DESCRIPTION | SEE ALSO
Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=pam_wheel&sektion=8&manpath=FreeBSD+5.0-RELEASE>