pam_opie man page on FreeBSD

Man page or keyword search:  
man Server   9747 pages
apropos Keyword Search (all sections)
Output format
FreeBSD logo
[printable version]

PAM_OPIE(8)		  BSD System Manager's Manual		   PAM_OPIE(8)

NAME
     pam_opie — OPIE PAM module

SYNOPSIS
     [service-name] module-type control-flag pam_opie [options]

DESCRIPTION
     The OPIE authentication service module for PAM, pam_opie provides func‐
     tionality for only one PAM category: that of authentication.  In terms of
     the module-type parameter, this is the “auth” feature.  It also provides
     a null function for session management.

     Note that this module does not enforce opieaccess(5) checks.  There is a
     separate module, pam_opieaccess(8), for this purpose.

   OPIE Authentication Module
     The OPIE authentication component provides functions to verify the iden‐
     tity of a user (pam_sm_authenticate()), which obtains the relevant
     opie(4) credentials.  It provides the user with an OPIE challenge, and
     verifies that this is correct with opiechallenge(3).

     The following options may be passed to the authentication module:

     debug	   syslog(3) debugging information at LOG_DEBUG level.

     auth_as_self  This option will require the user to authenticate himself
		   as the user given by getlogin(2), not as the account they
		   are attempting to access.  This is primarily for services
		   like su(1), where the user's ability to retype their own
		   password might be deemed sufficient.

     no_fake_prompts
		   Do not generate fake challenges for users who do not have
		   an OPIE key.	 Note that this can leak information to a
		   hypothetical attacker about who uses OPIE and who does not,
		   but it can be useful on systems where some users want to
		   use OPIE but most do not.

     Note that pam_opie ignores the standard options try_first_pass and
     use_first_pass, since a challenge must be generated before the user can
     submit a valid response.

FILES
     /etc/opiekeys  default OPIE password database.

SEE ALSO
     passwd(1), getlogin(2), opiechallenge(3), syslog(3), opie(4),
     pam.conf(5), pam(8)

BSD				 July 7, 2001				   BSD
[top]

List of man pages available for FreeBSD

Copyright (c) for man pages and the logo by the respective OS vendor.

For those who want to learn more, the polarhome community provides shell access and support.

[legal] [privacy] [GNU] [policy] [cookies] [netiquette] [sponsors] [FAQ]
Tweet
Polarhome, production since 1999.
Member of Polarhome portal.
Based on Fawad Halim's script.
...................................................................
Vote for polarhome
Free Shell Accounts :: the biggest list on the net