The guest service module for PAM allows guest logins.
If successful, the
module sets the PAM environment variable
GUEST
to the login name.
The application can check this variable using
pam_getenv3
to differentiate guest logins from normal logins.
The following options may be passed to the
module:
guests = list
Comma-separated list of guest account names.
The default is
``guest
''
A typical value for
ftpd(8)
would be
``anonymous,ftp
''
nopass
Omits the password prompt if the target account is on the list of
guest accounts.
pass_as_ruser
The password typed in by the user is exported as the
PAM_RUSER
item.
This is useful for applications like
ftpd(8)
where guest users are encouraged to use their email address as
password.
pass_is_user
Requires the guest user to type in the guest account name as password.
The
module and this manual page were developed for the
Fx Project by
ThinkSec AS and NAI Labs, the Security Research Division of Network
Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035
(``CBOSS''
)
as part of the DARPA CHATS research program.
