pam_guest(8)

pam_guest8

Guest pam module

Usage

[service-name] module-type control-flag pam_guest [arguments]

Overview

The guest service module for PAM allows guest logins. If successful, the pam_guest module sets the PAM environment variable GUEST to the login name. The application can check this variable using pam_getenv(3) to differentiate guest logins from normal logins.

The following options may be passed to the pam_guest module:

guests=list

Comma-separated list of guest account names. The default is “guest”. A typical value for ftpd(8) would be “anonymous,ftp”.

nopass

Omits the password prompt if the target account is on the list of guest accounts.

pass_as_ruser

The password typed in by the user is exported as the PAM_RUSER item. This is useful for applications like ftpd(8) where guest users are encouraged to use their email address as password.

pass_is_user

Requires the guest user to type in the guest account name as password.

Releases

54 releases since FreeBSD 5.2-RELEASE; the text changed 35 times.

  1. 5.2–5.2.1
  2. 5.3–6.3
  3. 6.4
  4. 7.0
  5. 7.1
  6. 7.2
  7. 7.3
  8. 7.4
  9. 8.0
  10. 8.1
  11. 8.2
  12. 8.3
  13. 8.4
  14. 9.0
  15. 9.1
  16. 9.2
  17. 9.3
  18. 10.0
  19. 10.1
  20. 10.2
  21. 10.3
  22. 10.4
  23. 11.0
  24. 11.1
  25. 11.2
  26. 11.3
  27. 11.4
  28. 12.0
  29. 12.1
  30. 12.2
  31. 12.3
  32. 12.4
  33. 13.0–13.2
  34. 13.3–13.5
  35. 14.0–14.2
  36. 14.3–16.0

Authors

The pam_guest module and this manual page were developed for the FreeBSD Project by ThinkSec AS and NAI Labs, the Security Research Division of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (“CBOSS”), as part of the DARPA CHATS research program.

From base 16.0-CURRENT-20261027-61c70dc16a79 in FreeBSD 16.0-CURRENT (2026-10-27). Parsed by carta from the page's mdoc source.