PAM_NOLOGIN(8) BSD System Manager's Manual PAM_NOLOGIN(8)NAMEpam_nologin — NoLogin PAM module
SYNOPSIS
[service-name] module-type control-flag pam_nologin [options]
DESCRIPTION
The NoLogin service module for PAM, pam_nologin provides functionality
for only one PAM category: account management. In terms of the
module-type parameter, this is the “account” feature.
NoLogin Account Management Module
The NoLogin account management component, pam_sm_acct_mgmt(), verifies
whether logins are administratively disabled via nologin(5). It returns
success if the user's login class has an "ignorenologin" capability spec‐
ified in login.conf(5) or the nologin(5) file does not exist. If neither
condition is met, then the contents of nologin(5) are echoed before fail‐
ure is returned. The location of nologin(5) is specified by a "nologin"
capability in login.conf(5), which defaults to /var/run/nologin.
The following options may be passed to the module:
debug syslog(3) debugging information at LOG_DEBUG level.
no_warn suppress warning messages to the user. These messages include
reasons why the user's login attempt was declined.
SEE ALSOsyslog(3), login.conf(5), nologin(5), pam.conf(5), pam(8)BSD June 10, 2007 BSD