---

MACS Client PAM Module

This documentation assumes familiarity with PAM configuration. With that in mind, usage:

   auth     required*   pam_macs.so [f cf] [m meth] [ [v|q] ... ]
   account  required*   pam_macs.so [r resource] [ [v|q] ... ]
   session  required*   pam_macs.so [p] [d] [ [v|q] ... ]

 

f cf

Specifies the location of the MACS configuration file. The format of the file is out of the scope of these comments, see the docs for MACS configuration.

m meth

Specifies the default method for to auth against. The default is determined at compile time by the MACS_DEF_METH define documented nearby. This may be overriden on a login-by-login basis by specifying it after an `@' sign. E.g., this module would interpret the login name user as refferring to the login `user' for method `method'.

v|q

Specifies the verbosity level of the module. This starts out at a default value determined at compile time by the MACS_DEF_V define documented nearby. Each `v' increases verbosity, while each `q' decreases it.

r resource

Specifies the resource to authorize against for access to this machine. The default is determined at compile time by the MACS_DEF_RES define documented nearby.

p

Assuming there is no entry for a given user in /etc/passwd, the session module may create one at login time. Each appearance of this option toggles the switch, which starts out as determined at compile time by the MACS_DEF_P define documented nearby.

d

Assuming we added an entry for a given user in /etc/passwd, the session module may also delete it at logout time. Each appearance of this option toggles the switch, which starts out as determined at compile time by the MACS_DEF_D define documented nearby.

Todo:

Write password module. (Do we actually want this?)

---