#acupoftea - mail.ontime-ae.com

System	:	Linux server1.ontime-gulf.com 4.18.0-553.5.1.el8_10.x86_64 #1 SMP Wed Jun 5 09:12:13 EDT 2024 x86_64
Software	:	Apache
Server	:	162.0.230.206
Domains	:	40 Domain
Permission	:	[ drwxr-xr-x ]
	:	/ usr / share / doc / pam / txts /

216.73.216.38

Home

File README.pam_listfile

pam_listfile — deny or allow services based on an arbitrary file

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

DESCRIPTION

pam_listfile is a PAM module which provides a way to deny or allow services
based on an arbitrary file.

The module gets the item of the type specified -- user specifies the username, 
PAM_USER; tty specifies the name of the terminal over which the request has
been made, PAM_TTY; rhost specifies the name of the remote host (if any) from
which the request was made, PAM_RHOST; and ruser specifies the name of the
remote user (if available) who made the request, PAM_RUSER -- and looks for an
instance of that item in the file=filename. filename contains one line per item
listed. If the item is found, then if sense=allow, PAM_SUCCESS is returned,
causing the authorization request to succeed; else if sense=deny, PAM_AUTH_ERR
is returned, causing the authorization request to fail.

If an error is encountered (for instance, if filename does not exist, or a
poorly-constructed argument is encountered), then if onerr=succeed, PAM_SUCCESS
is returned, otherwise if onerr=fail, PAM_AUTH_ERR or PAM_SERVICE_ERR (as
appropriate) will be returned.

An additional argument, apply=, can be used to restrict the application of the
above to a specific user (apply=username) or a given group (apply=@groupname).
This added restriction is only meaningful when used with the tty, rhost and 
shell items.

Besides this last one, all arguments should be specified; do not count on any
default behavior.

No credentials are awarded by this module.

OPTIONS

What is listed in the file and should be checked for.

sense=[allow|deny]

Action to take if found in file, if the item is NOT found in the file, then
    the opposite action is requested.

file=/path/filename

File containing one item per line. The file needs to be a plain file and
    not world writable.

onerr=[succeed|fail]

What to do if something weird happens like being unable to open the file.

apply=[user|@group]

Restrict the user class for which the restriction apply. Note that with
    item=[user|ruser|group] this does not make sense, but for item=[tty|rhost|
    shell] it have a meaning.

quiet

Do not treat service refusals or missing list files as errors that need to
    be logged.

EXAMPLES

Classic 'ftpusers' authentication can be implemented with this entry in /etc/
pam.d/ftpd:

#
# deny ftp-access to users listed in the /etc/ftpusers file
#
auth    required       pam_listfile.so \
        onerr=succeed item=user sense=deny file=/etc/ftpusers

Note, users listed in /etc/ftpusers file are (counterintuitively) not allowed
access to the ftp service.

To allow login access only for certain users, you can use a /etc/pam.d/login
entry like this:

#
# permit login to users listed in /etc/loginusers
#
auth    required       pam_listfile.so \
        onerr=fail item=user sense=allow file=/etc/loginusers

For this example to work, all users who are allowed to use the login service
should be listed in the file /etc/loginusers. Unless you are explicitly trying
to lock out root, make sure that when you do this, you leave a way for root to
log in, either by listing root in /etc/loginusers, or by listing a user who is
able to su to the root account.

AUTHOR

pam_listfile was written by Michael K. Johnson <johnsonm@redhat.com> and Elliot
Lee <sopwith@cuc.edu>.

Name	Type	Size	Permission	Last Modified	Actions
.	DIR	-	drwxr-xr-x	2025-08-28 10:58:24
..	DIR	-	drwxr-xr-x	2025-08-28 10:58:24
README.pam_access	text/plain	5.13 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_chroot	text/plain	1.47 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_console	text/plain	1.88 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_cracklib	text/plain	9.53 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_debug	text/plain	1.95 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_deny	text/plain	1.01 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_echo	text/plain	1.07 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_env	text/plain	3.54 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_exec	text/plain	2.18 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_faildelay	text/plain	827 B	-rw-r--r--	2025-08-26 08:58:55
README.pam_faillock	text/plain	5.92 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_filter	text/plain	3.03 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_ftp	text/plain	1.66 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_group	text/plain	2.12 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_issue	text/plain	1.32 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_keyinit	text/plain	2.19 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_lastlog	text/plain	2.54 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_limits	text/plain	2.36 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_listfile	text/plain	3.54 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_localuser	text/plain	1.14 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_loginuid	text/plain	1.09 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_mail	text/plain	1.96 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_mkhomedir	text/plain	1.33 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_motd	text/plain	2.53 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_namespace	text/plain	11.27 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_nologin	text/plain	1.32 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_permit	text/plain	907 B	-rw-r--r--	2025-08-26 08:58:55
README.pam_postgresok	text/plain	346 B	-rw-r--r--	2025-08-26 08:58:55
README.pam_pwhistory	text/plain	2.19 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_rhosts	text/plain	1.84 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_rootok	text/plain	1.06 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_securetty	text/plain	1.31 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_selinux	text/plain	2.84 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_sepermit	text/plain	1.61 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_shells	text/plain	653 B	-rw-r--r--	2025-08-26 08:58:55
README.pam_stress	text/plain	2.01 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_succeed_if	text/plain	2.8 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_time	text/plain	1.27 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_timestamp	text/plain	1.58 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_tty_audit	text/plain	2.71 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_umask	text/plain	1.59 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_unix	text/plain	7.09 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_userdb	text/plain	2.9 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_usertype	text/plain	1.17 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_warn	text/plain	1.2 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_wheel	text/plain	1.92 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_xauth	text/plain	3.61 KB	-rw-r--r--	2025-08-26 08:58:55

~ ACUPOFTEA - mail.ontime-ae.com