User guide

Appendix D - Linux-PAM
User Guide 345
pam_rootok This module is for use in situations where the superuser wishes to gain
access to a service without having to enter a password.
pam_securetty Provides standard UNIX securetty checking.
pam_time Running a well-regulated system occasionally involves restricting access
to certain services in a selective manner. This module offers some time
control for access to services offered by a system. Its actions are deter-
mined with a configuration file. This module can be configured to deny
access to (individual) users based on their name, the time of day, the day
of week, the service they are applying for and their terminal from
which they are making their request.
pam_tacplus Provides TacacsPlus Server authentication, authorization (account
management), and accounting (session management).
pam_unix This is the standard UNIX authentication module. It uses standard calls
from the system’s libraries to retrieve and set account information as well
as authentication. Usually this is obtained from the etc/passwd and the
/etc/shadow file as well when shadow is enabled.
pam_warn This module is principally for logging information about a proposed
authentication or application to update a password.
pam_krb5