pam_self(8)

pam_self8

Self pam module

Usage

[service-name] module-type control-flag pam_self [options]

Overview

The Self authentication service module for PAM, pam_self provides functionality for only one PAM category: authentication. In terms of the module-type parameter, this is the “auth” feature.

Self Authentication Module

The Self authentication component (pam_sm_authenticate()), returns success if and only if the target user's user ID is identical with the current real user ID. If the current real user ID is zero, authentication will fail, unless the allow_root option was specified.

The following options may be passed to the authentication module:

debug

syslog(3) debugging information at LOG_DEBUG level.

no_warn

suppress warning messages to the user. These messages include reasons why the user's authentication attempt was declined.

allow_root

do not automatically fail if the current real user ID is 0.

Releases

56 releases since FreeBSD 5.0-RELEASE; the text changed 36 times.

  1. 5.0–5.1
  2. 5.2–5.2.1
  3. 5.3–6.3
  4. 6.4
  5. 7.0
  6. 7.1
  7. 7.2
  8. 7.3
  9. 7.4
  10. 8.0
  11. 8.1
  12. 8.2
  13. 8.3
  14. 8.4
  15. 9.0
  16. 9.1
  17. 9.2
  18. 9.3
  19. 10.0
  20. 10.1
  21. 10.2
  22. 10.3
  23. 10.4
  24. 11.0
  25. 11.1
  26. 11.2
  27. 11.3
  28. 11.4
  29. 12.0
  30. 12.1
  31. 12.2
  32. 12.3
  33. 12.4
  34. 13.0–13.2
  35. 13.3–13.5
  36. 14.0–14.2
  37. 14.3–16.0

Authors

The pam_self module and this manual page were developed for the FreeBSD Project by ThinkSec AS and NAI Labs, the Security Research Division of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (“CBOSS”), as part of the DARPA CHATS research program.

From base 16.0-CURRENT-20261027-61c70dc16a79 in FreeBSD 16.0-CURRENT (2026-10-27). Parsed by carta from the page's mdoc source.