NAME¶

system-auth - Common configuration file for PAMified services

SYNOPSIS¶

/etc/pam.d/system-auth /etc/pam.d/password-auth /etc/pam.d/fingerprint-auth /etc/pam.d/smartcard-auth

DESCRIPTION¶

The purpose of these configuration files are to provide a common interface for all applications and service daemons calling into the PAM library.

The system-auth configuration file is included from nearly all individual service configuration files with the help of the include directive.

The password-auth fingerprint-auth smartcard-auth configuration files are for applications which handle authentication from different types of devices via simultaneously running individual conversations instead of one aggregate conversation.

NOTES¶

There should be no sufficient modules in the session part of system-auth file because individual services may add session modules after include of the system-auth file. Execution of these modules would be skipped if there were sufficient modules in system-auth file.

Conversely there should not be any modules after include directive in the individual service files in authaccount and password sections otherwise they could be bypassed.

BUGS¶

None known.

SEE ALSO¶

pam(8), config-util(5)

The three Linux-PAM Guides, for system administrators, module developers, and application developers.