The PAM documentation describes the "more elaborate"
("[value=action ...]") form of configuration file records. It
also describes the simpler form ("optional", "required", et al.)
but doesn't give their equivalents in "more elaborate" form. After
digging through rhe Linux-PAM 0.72 source, I believe they are as
follows. Can we please get the documentation
updated?
required == [success=ok new_authtok_reqd=ok
ignore=ignore default=bad]
requisite == [success=ok
new_authtok_reqd=ok ignore=ignore
default=die]
sufficient == [success=done
new_authtok_reqd=done ignore=ignore]
optional ==
[success=ok new_authtok_reqd=ok ignore=ignore]
Ross
Patterson
Computer Associates
Ross.Patterson@CA.Com
Logged In: YES
user_id=37107
Fixed in 0.76
Checking in CHANGELOG;
/cvsroot/pam/Linux-PAM/CHANGELOG,v <-- CHANGELOG
new revision: 1.134; previous revision: 1.133
done
Checking in doc/pam_source.sgml;
/cvsroot/pam/Linux-PAM/doc/pam_source.sgml,v <--
pam_source.sgml
new revision: 1.9; previous revision: 1.8
done