PAM_WHEEL(8)

NAME
pam_wheel - Wheel PAM module

SYNOPSIS
[service-name] module-type control-flag pam_wheel [options]

DESCRIPTION
The Wheel authentication service module for PAM, pam_wheel provides functionality for only one PAM category: authentication. In terms of the module-type parameter, this is the “auth” feature. It also provides a null function for session management.

  Wheel Authentication Module
The Wheel authentication component (pam_sm_authenticate()), permit authentication to members of a group, which defaults to “wheel”.

The following options may be passed to the authentication module:

debug
    syslog(3) debugging information at LOG_DEBUG level.

no_warn
    suppress warning messages to the user. These messages include reasons why the user's authentication attempt was declined.

auth_as_self
    check for “wheel” membership against the current login name (given by getlogin(2)).

trust
    return PAM_SUCCESS instead of PAM_IGNORE if the user is a member of the group (default is “wheel”).

deny
    invert the operation if the user is a member of the (default “wheel”) group. Returns failure instead of success. Mainly of use with the group=foo option.

group=foo
    checking for membership of group foo instead of the default group “wheel”.

noroot_ok
    return PAM_SUCCESS instead of PAM_IGNORE if the user is authenticating to a user that is not the superuser.

SEE ALSO
getlogin(2), syslog(3), group(5), pam.conf(5), pam(8)