Appendix D - Linux-PAM
User Guide
343
Module Path
Module Path is the path-name of the dynamically loadable object file--the pluggable module
itself. If the first character of the module path is ‘/’, it is assumed to be a complete path. If this
is not the case, the given module path is appended to the default module path: /lib/security.
Currently, the BLACK BOX
®
Advanced Console Server has the following modules available:
Bad
This action indicates that the return code should be thought of as
indicative of the module failing. If this module is the first in the
stack to fail, its status value will be used for that of the whole
stack.
Die
Equivalent to
bad
with the side effect of terminating the module
stack and PAM immediately returning to the application.
OK
This tells PAM that the administrator thinks this return code
should contribute directly to the return code of the full stack of
modules. In other words, if the former state of the stack would
lead to a return of PAM_SUCCESS, the module’s return code will
override this value. Note: if the former state of the stack holds
some value that is indicative of a module failure, this ‘OK’ value
will not be used to override that value.
Done
Equivalent to OK with the side-0effect of terminating the module
stack and PAM immediately returning to the application.
Reset
Clear all memory of the state of the module stack and start again
with the next stacked module.
pam_access
Provides logdaemon style login access control.
pam_deny
Deny access to all users.
