User guide

Appendix D - Linux-PAM
346 BLACK BOX ® Advanced Console Server
Arguments
The arguments are a list of tokens that are passed to the module when it is invoked. They are
much like arguments to a typical Linux shell command. Generally, valid arguments are
optional and are specific to any given module. Invalid arguments are ignored by a module,
however, when encountering an invalid argument, the module is required to write an error to
syslog(3).
The following are optional arguments which are likely to be understood by any module. Argu-
ments (including these) are in general, optional.
pam_ldap Pam_ldap looks for the ldap client configuration file “ldap.conf” in /etc/.
Here's an example of the ldap.conf file (partial):
# file name: ldap.conf
# This is the configuration file for the LDAP
nameservice
# switch library and the LDAP PAM module.
#
# Your LDAP server. Must be resolvable without using
LDAP.
host 127.0.0.1
# The distinguished name of the search base.
base dc=padl,dc=com
debug Use the syslog(3) call to log debugging information to the system
log files.
no_warn Instruct module to not give warning messages to the application.
use_first_pass The module should not prompt the user for a password. Instead, it
should obtain the previously typed password (from the preceding
auth module), and use that. If that doesn’t work, then the user will
not be authenticated. (This option is intended for auth and
password modules only).