FreeBSD Manual Pages
PAM_WHEEL(8) FreeBSD System Manager's Manual PAM_WHEEL(8) NAME pam_wheel -- Wheel PAM module SYNOPSIS [service-name] module-type control-flag pam_wheel [options] DESCRIPTION The Wheel authentication service module for PAM, pam_wheel provides func- tionality for only one PAM category: authentication. In terms of the module-type parameter, this is the ``auth'' feature. It also provides a null function for session management. Wheel Authentication Module The Wheel authentication component (pam_sm_authenticate()), permit authentication to members of a group, which defaults to ``wheel''. The following options may be passed to the authentication module: debug syslog(3) debugging information at LOG_DEBUG level. no_warn suppress warning messages to the user. These messages include reasons why the user's authentication attempt was declined. auth_as_self check for ``wheel'' membership against the current login name (given by getlogin(2)). trust return PAM_SUCCESS instead of PAM_IGNORE if the user is a member of the group (default is ``wheel''). deny invert the operation if the user is a member of the (default ``wheel'') group. Returns failure instead of success. Mainly of use with the group=foo option. group=foo checking for membership of group foo instead of the default group ``wheel''. noroot_ok return PAM_SUCCESS instead of PAM_IGNORE if the user is authenticating to a user that is not the superuser. exempt_if_empty return PAM_IGNORE if the specified group (default group of ``wheel'') is empty, providing traditional BSD su(8) semantics permitting any user to ``su'' if the wheel group is empty. SEE ALSO getlogin(2), syslog(3), group(5), pam.conf(5), pam(8) FreeBSD 11.1 July 8, 2001 FreeBSD 11.1
NAME | SYNOPSIS | DESCRIPTION | SEE ALSO
Want to link to this manual page? Use this URL:
<https://www.freebsd.org/cgi/man.cgi?query=pam_wheel&sektion=8&manpath=FreeBSD+5.0-RELEASE>