Skip site navigation (1)Skip section navigation (2)

FreeBSD Man Pages

Man Page or Keyword Search:
Man Architecture
Apropos Keyword Search (all sections) Output format
home | help
PAM_WHEEL(8)            FreeBSD System Manager's Manual           PAM_WHEEL(8)

NAME
     pam_wheel - Wheel PAM module

SYNOPSIS
     [service-name] module-type control-flag pam_wheel [options]

DESCRIPTION
     The Wheel authentication service module for PAM, pam_wheel provides
     functionality for only one PAM category: authentication.  In terms of the
     module-type parameter, this is the ``auth'' feature.  It also provides a
     null function for session management.

   Wheel Authentication Module
     The Wheel authentication component (pam_sm_authenticate()), permit
     authentication to members of a group, which defaults to ``wheel''.

     The following options may be passed to the authentication module:

     debug                syslog(3) debugging information at LOG_DEBUG level.

     no_warn              suppress warning messages to the user.  These
                          messages include reasons why the user's
                          authentication attempt was declined.

     auth_as_self         check for ``wheel'' membership against the current
                          login name (given by getlogin(2)).

     trust                return PAM_SUCCESS instead of PAM_IGNORE if the user
                          is a member of the group (default is ``wheel'').

     deny                 invert the operation if the user is a member of the
                          (default ``wheel'') group.  Returns failure instead
                          of success.  Mainly of use with the group=foo
                          option.

     group=foo            checking for membership of group foo instead of the
                          default group ``wheel''.

     noroot_ok            return PAM_SUCCESS instead of PAM_IGNORE if the user
                          is authenticating to a user that is not the
                          superuser.

     exempt_if_empty      return PAM_IGNORE if the specified group (default
                          group of ``wheel'') is empty, providing traditional
                          BSD su(8) semantics permitting any user to ``su'' if
                          the wheel group is empty.

SEE ALSO
     getlogin(2), syslog(3), group(5), pam.conf(5), pam(8)

FreeBSD 11.0-PRERELEASE          July 8, 2001          FreeBSD 11.0-PRERELEASE

NAME | SYNOPSIS | DESCRIPTION | SEE ALSO

Want to link to this manual page? Use this URL:
<https://www.freebsd.org/cgi/man.cgi?query=pam_wheel&sektion=8&manpath=FreeBSD+5.0-RELEASE>

home | help