nologin(5) [freebsd man page]

NOLOGIN(5)						      BSD File Formats Manual							NOLOGIN(5)

NAME

     nologin -- disallow logins

DESCRIPTION

     Programs such as login(1) disallow logins if the nologin file exists.  The programs display the contents of nologin to the user if possible
     and interrupt the login sequence.	This makes it simple to temporarily prevent incoming logins systemwide.

     To disable logins on a per-account basis, investigate nologin(8).

SECURITY

     The nologin file is ignored for user root by default.

IMPLEMENTATION NOTES

     The nologin feature is implemented through login.conf(5), which allows to change the pathname of the file and to extend the list of users
     exempt from temporary login restriction.

     PAM-aware programs can be selectively configured to respect nologin using the pam_nologin(8) module via pam.conf(5).

     The nologin file will be removed at system boot if it resides in /var/run and cleanvar_enable is set to ``YES'' in rc.conf(5), which is
     default.  Therefore system reboot can effectively re-enable logins.

FILES

     /var/run/nologin  default location of nologin

SEE ALSO

     login(1), login.conf(5), pam.conf(5), rc.conf(5), nologin(8), pam_nologin(8), shutdown(8)

BSD
								   May 10, 2007 							       BSD

PAM_NOLOGIN(8)						    BSD System Manager's Manual 					    PAM_NOLOGIN(8)

NAME

     pam_nologin -- NoLogin PAM module

SYNOPSIS

     [service-name] module-type control-flag pam_nologin [options]

DESCRIPTION

     The NoLogin service module for PAM, pam_nologin provides functionality for only one PAM category: account management.  In terms of the
     module-type parameter, this is the ``account'' feature.

   NoLogin Account Management Module
     The NoLogin account management component, pam_sm_acct_mgmt(), verifies whether logins are administratively disabled via nologin(5).  It
     returns success if the user's login class has an "ignorenologin" capability specified in login.conf(5) or the nologin(5) file does not exist.
     If neither condition is met, then the contents of nologin(5) are echoed before failure is returned.  The location of nologin(5) is specified
     by a "nologin" capability in login.conf(5), which defaults to /var/run/nologin.

     The following options may be passed to the module:

     debug    syslog(3) debugging information at LOG_DEBUG level.

     no_warn  suppress warning messages to the user.  These messages include reasons why the user's login attempt was declined.

SEE ALSO

     syslog(3), login.conf(5), nologin(5), pam.conf(5), pam(8)

BSD
								   June 10, 2007							       BSD