Appendix D - Linux-PAM
344
BLACK BOX
®
Advanced Console Server
pam_env
This module allows the (un)setting of environment variables. The use of
previously set environment variables as well as PAM_ITEMs such as
PAM_RHOST is supported.
pam_filter
This module was written to offer a plug-in alternative to programs like
ttysnoop (XXX - need a reference). Since a filter that performs this
function has not been written, it is currently only a toy. The single filter
provided with the module simply transposes upper and lower case letters
in the input and output streams. (This can be very annoying and is not
kind to termcap-based editors.)
pam_group
This module provides group settings based on the user’s name and the
terminal they are requesting a given service from. It takes note of the
time of day.
pam_issue
This module presents the issue file (/etc/issue by default) when
prompting for a username.
pam_lastlog
This session module maintains the /var/log/lastlog file. It adds an open
entry when called via the pam_open_session()function and completes it
when pam_close_session() is called. This module can also display a line
of information about the last login of the user. If an application already
performs these tasks, it is not necessary to use this module.
pam_limits
This module, through the Linux-PAM open-session hook, sets limits on
the system resources that can be obtained in a user session. Its actions are
dictated more explicitly through the configuration file discussed in
/etc/security/pam_limits.conf.
pam_listfile
The listfile module provides a way to deny or allow services based on an
arbitrary file.
pam_motd
This module outputs the motd file (/etc/motd by default) upon successful
login.
pam_nologin
Provides standard Unix nologin authentication.
pam_permit
This module should be used with extreme caution. Its action is to always
permit access. It does nothing else.
pam_radius
Provides Radius server authentication and accounting.
