Appendix D - Linux-PAM
User Guide
345
pam_rootok
This module is for use in situations where the superuser wishes to gain
access to a service without having to enter a password.
pam_securetty
Provides standard UNIX securetty checking.
pam_time
Running a well-regulated system occasionally involves restricting access
to certain services in a selective manner. This module offers some time
control for access to services offered by a system. Its actions are deter-
mined with a configuration file. This module can be configured to deny
access to (individual) users based on their name, the time of day, the day
of week, the service they are applying for and their terminal from
which they are making their request.
pam_tacplus
Provides TacacsPlus Server authentication, authorization (account
management), and accounting (session management).
pam_unix
This is the standard UNIX authentication module. It uses standard calls
from the system’s libraries to retrieve and set account information as well
as authentication. Usually this is obtained from the etc/passwd and the
/etc/shadow file as well when shadow is enabled.
pam_warn
This module is principally for logging information about a proposed
authentication or application to update a password.
pam_krb5
