#acupoftea - mail.ontime-ae.com

System	:	Linux server1.ontime-gulf.com 4.18.0-553.5.1.el8_10.x86_64 #1 SMP Wed Jun 5 09:12:13 EDT 2024 x86_64
Software	:	Apache
Server	:	162.0.230.206
Domains	:	40 Domain
Permission	:	[ drwxr-xr-x ]
	:	/ usr / share / doc / pam / txts /

216.73.216.38

Home

File README.pam_xauth

pam_xauth — PAM module to forward xauth keys between users

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

DESCRIPTION

The pam_xauth PAM module is designed to forward xauth keys (sometimes referred
to as "cookies") between users.

Without pam_xauth, when xauth is enabled and a user uses the su(1) command to
assume another user's privileges, that user is no longer able to access the
original user's X display because the new user does not have the key needed to
access the display. pam_xauth solves the problem by forwarding the key from the
user running su (the source user) to the user whose identity the source user is
assuming (the target user) when the session is created, and destroying the key
when the session is torn down.

This means, for example, that when you run su(1) from an xterm session, you
will be able to run X programs without explicitly dealing with the xauth(1)
xauth command or ~/.Xauthority files.

pam_xauth will only forward keys if xauth can list a key connected to the
$DISPLAY environment variable.

Primitive access control is provided by ~/.xauth/export in the invoking user's
home directory and ~/.xauth/import in the target user's home directory.

If a user has a ~/.xauth/import file, the user will only receive cookies from
users listed in the file. If there is no ~/.xauth/import file, the user will
accept cookies from any other user.

If a user has a .xauth/export file, the user will only forward cookies to users
listed in the file. If there is no ~/.xauth/export file, and the invoking user
is not root, the user will forward cookies to any other user. If there is no ~
/.xauth/export file, and the invoking user is root, the user will not forward
cookies to other users.

Both the import and export files support wildcards (such as *). Both the import
and export files can be empty, signifying that no users are allowed.

OPTIONS

debug

Print debug information.

xauthpath=/path/to/xauth

Specify the path the xauth program (it is expected in /usr/X11R6/bin/xauth,
    /usr/bin/xauth, or /usr/bin/X11/xauth by default).

systemuser=UID

Specify the highest UID which will be assumed to belong to a "system" user.
    pam_xauth will refuse to forward credentials to users with UID less than or
    equal to this number, except for root and the "targetuser", if specified.

targetuser=UID

Specify a single target UID which is exempt from the systemuser check.

EXAMPLES

Add the following line to /etc/pam.d/su to forward xauth keys between users
when calling su:

session  optional  pam_xauth.so

IMPLEMENTATION DETAILS

pam_xauth will work only if it is used from a setuid application in which the
getuid() call returns the id of the user running the application, and for which
PAM can supply the name of the account that the user is attempting to assume.
The typical application of this type is su(1). The application must call both
pam_open_session() and pam_close_session() with the ruid set to the uid of the
calling user and the euid set to root, and must have provided as the PAM_USER
item the name of the target user.

pam_xauth calls xauth(1) as the source user to extract the key for $DISPLAY,
then calls xauth as the target user to merge the key into the a temporary
database and later remove the database.

pam_xauth cannot be told to not remove the keys when the session is closed.

AUTHOR

pam_xauth was written by Nalin Dahyabhai <nalin@redhat.com>, based on original
version by Michael K. Johnson <johnsonm@redhat.com>.

Name	Type	Size	Permission	Last Modified	Actions
.	DIR	-	drwxr-xr-x	2025-08-28 10:58:24
..	DIR	-	drwxr-xr-x	2025-08-28 10:58:24
README.pam_access	text/plain	5.13 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_chroot	text/plain	1.47 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_console	text/plain	1.88 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_cracklib	text/plain	9.53 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_debug	text/plain	1.95 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_deny	text/plain	1.01 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_echo	text/plain	1.07 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_env	text/plain	3.54 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_exec	text/plain	2.18 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_faildelay	text/plain	827 B	-rw-r--r--	2025-08-26 08:58:55
README.pam_faillock	text/plain	5.92 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_filter	text/plain	3.03 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_ftp	text/plain	1.66 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_group	text/plain	2.12 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_issue	text/plain	1.32 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_keyinit	text/plain	2.19 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_lastlog	text/plain	2.54 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_limits	text/plain	2.36 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_listfile	text/plain	3.54 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_localuser	text/plain	1.14 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_loginuid	text/plain	1.09 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_mail	text/plain	1.96 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_mkhomedir	text/plain	1.33 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_motd	text/plain	2.53 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_namespace	text/plain	11.27 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_nologin	text/plain	1.32 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_permit	text/plain	907 B	-rw-r--r--	2025-08-26 08:58:55
README.pam_postgresok	text/plain	346 B	-rw-r--r--	2025-08-26 08:58:55
README.pam_pwhistory	text/plain	2.19 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_rhosts	text/plain	1.84 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_rootok	text/plain	1.06 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_securetty	text/plain	1.31 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_selinux	text/plain	2.84 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_sepermit	text/plain	1.61 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_shells	text/plain	653 B	-rw-r--r--	2025-08-26 08:58:55
README.pam_stress	text/plain	2.01 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_succeed_if	text/plain	2.8 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_time	text/plain	1.27 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_timestamp	text/plain	1.58 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_tty_audit	text/plain	2.71 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_umask	text/plain	1.59 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_unix	text/plain	7.09 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_userdb	text/plain	2.9 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_usertype	text/plain	1.17 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_warn	text/plain	1.2 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_wheel	text/plain	1.92 KB	-rw-r--r--	2025-08-26 08:58:55
README.pam_xauth	text/plain	3.61 KB	-rw-r--r--	2025-08-26 08:58:55

~ ACUPOFTEA - mail.ontime-ae.com