pam_sacl8

Usage

Overview

The Service Access Control List PAM module supports the account management function class. In terms of the function-class parameter, this is the “account” class.

The Service Access Control List account management module verifies that the authenticated user is permitted access by checking the username against the the SACL of the service named by the sacl_service option.

The following option must be passed to this account module:

sacl_service=SERVICE

This option names the SACL that the username should be checked against. SERVICE should be the literal name of the service (e.g. “sacl_service=smb”).

The following options may be passed to the account module:

allow_trustacct

Always allow access to computer trust accounts.

debug

Debug information will be printed to the system log.