pam_group(8) BSD System Manager's Manual pam_group(8)NAME
pam_group -- Group PAM module
SYNOPSIS
[service-name] function-class control-flag pam_group [options]
DESCRIPTION
The Group PAM module supports the account management function class. In terms of the function-class parameter, this is the ``account''
class.
The Group account management module permits or denies users based on their membership to a particular group (or groups) specified with the
group option. If no groups are specified the default group (``wheel'') will be used.
The following options may be passed to this account management module:
deny Reverse the meaning of the test, i.e., reject the applicant if and only if he or she is a member of the specified group. This
can be useful to exclude certain groups of users from certain services.
fail_safe If the specified group does not exist, or has no members, act as if it does exist and the applicant is a member.
group=groupname
Specify the name of the group to check. This can be a comma-separated list (i.e. ``group=admin,wheel'').
root_only Skip this module entirely if the target account is not the superuser account.
ruser Check the membership of the applicant (PAM_RUSER), rather than the target account (PAM_USER)
SEE ALSO pam_get_item(3), pam.conf(5), pam(8), DirectoryService(8)AUTHORS
The pam_group module and this manual page were developed for the FreeBSD Project by ThinkSec AS and NAI Labs, the Security Research Division
of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (``CBOSS''), as part of the DARPA CHATS research program.
BSD February 7, 2009 BSD
Check Out this Related Man Page
PAM_LOGIN_ACCESS(8) BSD System Manager's Manual PAM_LOGIN_ACCESS(8)NAME
pam_login_access -- login.access PAM module
SYNOPSIS
[service-name] module-type control-flag pam_login_access [options]
DESCRIPTION
The login.access service module for PAM, pam_login_access provides functionality for only one PAM category: account management. In terms of
the module-type parameter, this is the ``account'' feature.
Login.access Account Management Module
The login.access account management component (pam_sm_acct_mgmt()), returns success if and only the user is allowed to log in on the speci-
fied tty (in the case of a local login) or from the specified remote host (in the case of a remote login), according to the restrictions
listed in login.access(5).
SEE ALSO login.access(5), pam.conf(5), pam(8)AUTHORS
The login.access(5) access control scheme was designed and implemented by Wietse Venema.
The pam_login_access module and this manual page were developed for the FreeBSD Project by ThinkSec AS and NAI Labs, the Security Research
Division of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (``CBOSS''), as part of the DARPA CHATS research program.
BSD January 24, 2002 BSD
There's a feature I reall ylike in FreeBSD that's I haven't seen implemented in Solaris.
In FreeBSD you can only "su" if you are part of the 'wheel' group... this isn't the case with my Solaris box.
I want to know how I can set my solaris box so that only people who are part of the 'sysadmin'... (4 Replies)
Discussion started by: xyyz
4 Replies
2. Forum Support Area for Unregistered Users & Account Problems
Hi,
I need you help with my research project that attempts to determine the
link between users and manufacturers of IT Products such as Unix.
This is part of an MBA program that I'm currently pursuing. My challenge is that I cannot possibly find out how I can send my research... (1 Reply)
I'm the admin in a shop in which my developers have and use the root account, all UNIX newbies.
I've been unable to convince management myself that this is an unacceptable practice.
I've looked in a couple books I have and can't find any chapters, discussions, etc that make the argument that... (2 Replies)
Hello everyone,
Would any of you know what group I need to be a member of to be able to change system settings via WSM?
I have tried adding myself to couple of groups (adm, sucurity, system) but so far no good. I am able to see what settings are applied, but cannot change them.
Thanks in... (3 Replies)
Discussion started by: juniorG
3 Replies
5. Forum Support Area for Unregistered Users & Account Problems
Hi..
I am a new member and have gone through the registration process. I had a question that I wanted to pos but for some rason, my account does nto allow me to do it. Is there a secret?
Sorry to bother you with this but... didn't know where else to turn.
Thanks
Hal Lavender (3 Replies)
Hi,
I want to close my account and cannot find any relevant links in the user control panel or account preferences. Can someone point me in the right direction, or a moderator/admin close this account?
Thanks. (1 Reply)
We have an environment of around 50 AIX LPARs. We use scripts for user and group account management but it is starting to get unwieldy to document and manage the accounts. It would be doable with scripts but before we dedicate resources to that, I was wondering if there is any product that you... (2 Replies)