pam_test(5)pam_test(5)NAMEpam_test - authentication management functions for testing PAM
SYNOPSIS
/usr/lib/security/pam_test.so
DESCRIPTION
The TEST service module for PAM is divided into four components: The
authentication, account management, password management, and session
management. The test is a shared object that is dynamically loaded to
provide the necessary functionality.
TEST Authentication Component
The TEST authentication module, typically /usr/lib/secu‐
rity/pam_test.so, provides functions to test the PAM framework func‐
tionality using the pam_sm_authenticate(3) call. The TEST module
implementation of the pam_sm_authenticate(3) function compares the user
entered password with the password set in the pam.conf(4) file, or the
string "test" if a default test password has not been set. The follow‐
ing options may be passed in to the TEST Authentication module:
debug Syslog debugging information at the LOG_DEBUG
level.
passwd=foobar Sets the password to be "foobar".
first_pass_good
The first password is always good when used with
the use_first_pass or try_first_pass option.
first_pass_bad The first password is always bad when used with
the use_first_pass or try_first_pass option.
always_fail Always returns PAM_AUTH_ERR.
always_succeed Always returns PAM_SUCCESS.
always_ignore Always returns PAM_IGNORE.
use_first_pass Use the user's initial password (entered when
the user is authenticated to the first authenti‐
cation module in the stack) to authenticate with
the TEST module. If the passwords do not match,
or if this is the first authentication module in
the stack, quit and do not prompt the user for a
password. It is recommended that this option only
be used if the TEST authentication module is des‐
ignated as optional in the pam.conf configuration
file.
try_first_pass Use the user's initial password (entered when
the user is authenticated to the first authenti‐
cation module in the stack) to authenticate with
the TEST module. If the passwords do not match,
or if this is the first authentication module in
the stack, prompt the user for a password.
The TEST module pam_sm_setcred(3) function always returns PAM_SUCCESS.
TEST Account Management Component
The TEST Account Management Component (pam_sm_acct_mgmt(3)) always
returns PAM_SUCCESS.
TEST Password Management Component
The TEST Password Management Component function (pam_sm_chauthtok(3)),
always returns PAM_SUCCESS.
TEST Session Management Component
The TEST Session Management Component functions (pam_sm_open_ses‐
sion(3), pam_sm_close_session(3)) always return PAM_SUCCESS.
SEE ALSOpam(3), pam.conf(4)
19 October 1995 pam_test(5)
