pam_group(8) BSD System Manager's Manual pam_group(8)NAME
pam_group -- Group PAM module
SYNOPSIS
[service-name] function-class control-flag pam_group [options]
DESCRIPTION
The Group PAM module supports the account management function class. In terms of the function-class parameter, this is the ``account''
class.
The Group account management module permits or denies users based on their membership to a particular group (or groups) specified with the
group option. If no groups are specified the default group (``wheel'') will be used.
The following options may be passed to this account management module:
deny Reverse the meaning of the test, i.e., reject the applicant if and only if he or she is a member of the specified group. This
can be useful to exclude certain groups of users from certain services.
fail_safe If the specified group does not exist, or has no members, act as if it does exist and the applicant is a member.
group=groupname
Specify the name of the group to check. This can be a comma-separated list (i.e. ``group=admin,wheel'').
root_only Skip this module entirely if the target account is not the superuser account.
ruser Check the membership of the applicant (PAM_RUSER), rather than the target account (PAM_USER)
SEE ALSO pam_get_item(3), pam.conf(5), pam(8), DirectoryService(8)AUTHORS
The pam_group module and this manual page were developed for the FreeBSD Project by ThinkSec AS and NAI Labs, the Security Research Division
of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (``CBOSS''), as part of the DARPA CHATS research program.
BSD February 7, 2009 BSD
Check Out this Related Man Page
pam_group(8) BSD System Manager's Manual pam_group(8)NAME
pam_group -- Group PAM module
SYNOPSIS
[service-name] function-class control-flag pam_group [options]
DESCRIPTION
The Group PAM module supports the account management function class. In terms of the function-class parameter, this is the ``account''
class.
The Group account management module permits or denies users based on their membership to a particular group (or groups) specified with the
group option. If no groups are specified the default group (``wheel'') will be used.
The following options may be passed to this account management module:
deny Reverse the meaning of the test, i.e., reject the applicant if and only if he or she is a member of the specified group. This
can be useful to exclude certain groups of users from certain services.
fail_safe If the specified group does not exist, or has no members, act as if it does exist and the applicant is a member.
group=groupname
Specify the name of the group to check. This can be a comma-separated list (i.e. ``group=admin,wheel'').
root_only Skip this module entirely if the target account is not the superuser account.
ruser Check the membership of the applicant (PAM_RUSER), rather than the target account (PAM_USER)
SEE ALSO pam_get_item(3), pam.conf(5), pam(8), DirectoryService(8)AUTHORS
The pam_group module and this manual page were developed for the FreeBSD Project by ThinkSec AS and NAI Labs, the Security Research Division
of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (``CBOSS''), as part of the DARPA CHATS research program.
BSD February 7, 2009 BSD
There's a feature I reall ylike in FreeBSD that's I haven't seen implemented in Solaris.
In FreeBSD you can only "su" if you are part of the 'wheel' group... this isn't the case with my Solaris box.
I want to know how I can set my solaris box so that only people who are part of the 'sysadmin'... (4 Replies)
Discussion started by: xyyz
4 Replies
2. Forum Support Area for Unregistered Users & Account Problems
Hi,
I need you help with my research project that attempts to determine the
link between users and manufacturers of IT Products such as Unix.
This is part of an MBA program that I'm currently pursuing. My challenge is that I cannot possibly find out how I can send my research... (1 Reply)
I'm the admin in a shop in which my developers have and use the root account, all UNIX newbies.
I've been unable to convince management myself that this is an unacceptable practice.
I've looked in a couple books I have and can't find any chapters, discussions, etc that make the argument that... (2 Replies)
Hello everyone,
Would any of you know what group I need to be a member of to be able to change system settings via WSM?
I have tried adding myself to couple of groups (adm, sucurity, system) but so far no good. I am able to see what settings are applied, but cannot change them.
Thanks in... (3 Replies)
Discussion started by: juniorG
3 Replies
5. Forum Support Area for Unregistered Users & Account Problems
Hi..
I am a new member and have gone through the registration process. I had a question that I wanted to pos but for some rason, my account does nto allow me to do it. Is there a secret?
Sorry to bother you with this but... didn't know where else to turn.
Thanks
Hal Lavender (3 Replies)
Hi,
I want to close my account and cannot find any relevant links in the user control panel or account preferences. Can someone point me in the right direction, or a moderator/admin close this account?
Thanks. (1 Reply)
We have an environment of around 50 AIX LPARs. We use scripts for user and group account management but it is starting to get unwieldy to document and manage the accounts. It would be doable with scripts but before we dedicate resources to that, I was wondering if there is any product that you... (2 Replies)