By default rules for access management are taken from config file /etc/security/access.conf if you don't specify another file.  

OPTIONS

accessfile=/path/to/access.conf

Indicate an alternative access.conf style configuration file to override the default. This can be useful when different services need different access lists.

debug

A lot of debug informations are printed with syslog(3).

noaudit

Do not report logins from disallowed hosts and ttys to the audit subsystem.

fieldsep=separators

This option modifies the field separator character that pam_access will recognize when parsing the access configuration file. For example: fieldsep=| will cause the default `:' character to be treated as part of a field value and `|' becomes the field separator. Doing this may be useful in conjuction with a system that wants to use pam_access with X based applications, since the PAM_TTY item is likely to be of the form "hostname:0" which includes a `:' character in its value. But you should not need this.

listsep=separators

This option modifies the list separator character that pam_access will recognize when parsing the access configuration file. For example: listsep=, will cause the default ` ' (space) and `\t' (tab) characters to be treated as part of a list element value and `,' becomes the only list element separator. Doing this may be useful on a system with group information obtained from a Windows domain, where the default built-in groups "Domain Users", "Domain Admins" contain a space.

MODULE SERVICES PROVIDED

All services are supported.  

RETURN VALUES

PAM_SUCCESS

Access was granted.

PAM_PERM_DENIED

Access was not granted.

PAM_IGNORE

pam_setcred was called which does nothing.

PAM_ABORT

Not all relevant data or options could be gotten.

PAM_USER_UNKNOWN

The user is not known to the system.

FILES

/etc/security/access.conf

Default configuration file

SEE ALSO

access.conf(5), pam.d(8), pam(8).  

AUTHORS

The logdaemon style login access control scheme was designed and implemented by Wietse Venema. The pam_access PAM module was developed by Alexei Nogin <alexei@nogin.dnttm.ru>. The IPv6 support and the network(address) / netmask feature was developed and provided by Mike Becher <mike.becher@lrz-muenchen.de>.

Index

NAME

SYNOPSIS

DESCRIPTION

OPTIONS

MODULE SERVICES PROVIDED

RETURN VALUES

FILES

SEE ALSO

AUTHORS

Партнёры:

Хостинг: