NAME | SYNOPSIS | DESCRIPTION | OPTIONS | MODULE TYPES PROVIDED | RETURN VALUES | EXAMPLES | FILES | SEE ALSO | AUTHOR | COLOPHON

PAM_LOCALUSER(8)              Linux-PAM Manual              PAM_LOCALUSER(8)

NAME         top

       pam_localuser - require users to be listed in /etc/passwd

SYNOPSIS         top

       pam_localuser.so [debug] [file=/path/passwd]

DESCRIPTION         top

       pam_localuser is a PAM module to help implementing site-wide login
       policies, where they typically include a subset of the network's
       users and a few accounts that are local to a particular workstation.
       Using pam_localuser and pam_wheel or pam_listfile is an effective way
       to restrict access to either local users and/or a subset of the
       network's users.
       This could also be implemented using pam_listfile.so and a very short
       awk script invoked by cron, but it's common enough to have been
       separated out.

OPTIONS         top

       debug
           Print debug information.
       file=/path/passwd
           Use a file other than /etc/passwd.

MODULE TYPES PROVIDED         top

       All module types (account, auth, password and session) are provided.

RETURN VALUES         top

       PAM_SUCCESS
           The new localuser was set successfully.
       PAM_SERVICE_ERR
           No username was given.
       PAM_USER_UNKNOWN
           User not known.

EXAMPLES         top

       Add the following line to /etc/pam.d/su to allow only local users in
       group wheel to use su.
           account sufficient pam_localuser.so
           account required pam_wheel.so

FILES         top

       /etc/passwd
           Local user account information.

SEE ALSO         top

       pam.conf(5), pam.d(5), pam(8)

AUTHOR         top

       pam_localuser was written by Nalin Dahyabhai <nalin@redhat.com>.

COLOPHON         top

       This page is part of the linux-pam (Pluggable Authentication Modules
       for Linux) project.  Information about the project can be found at 
       ⟨http://www.linux-pam.org/⟩.  If you have a bug report for this manual
       page, see ⟨//www.linux-pam.org/⟩.  This page was obtained from the
       tarball Linux-PAM-1.3.0.tar.gz fetched from 
       ⟨http://www.linux-pam.org/library/⟩ on 2017-07-05.  If you discover
       any rendering problems in this HTML version of the page, or you
       believe there is a better or more up-to-date source for the page, or
       you have corrections or improvements to the information in this
       COLOPHON (which is not part of the original manual page), send a mail
       to man-pages@man7.org
Linux-PAM Manual                 04/01/2016                 PAM_LOCALUSER(8)