Name
pam_stress - The stress-testing PAM moduleSynopsis
pam_stress.so [debug] [no_warn] [use_first_pass] [try_first_pass] [rootok] [expired] [fail_1] [fail_2] [prelim] [required]
Description
The pam_stress PAM module is mainly intended to give the impression of failing as a fully functioning module might.
Options
debug Put lots of information in syslog. *NOTE* this option writes passwords to syslog, so don\*(Aqt use anything sensitive when testing.
no_warn Do not give warnings about things (otherwise warnings are issued via the conversation function)
use_first_pass Do not prompt for a password, for pam_sm_authentication function just use item PAM_AUTHTOK.
try_first_pass Do not prompt for a password unless there has been no previous authentication token (item PAM_AUTHTOK is NULL)
rootok This is intended for the pam_sm_chauthtok function and it instructs this function to permit root to change the user\*(Aqs password without entering the old password.
expired An argument intended for the account and chauthtok module parts. It instructs the module to act as if the user\*(Aqs password has expired
fail_1 This instructs the module to make its first function fail.
fail_2 This instructs the module to make its second function (if there is one) fail.
prelim For pam_sm_chauthtok, means fail on PAM_PRELIM_CHECK.
required For pam_sm_chauthtok, means fail if the user hasn\*(Aqt already been authenticated by this module. (See stress_new_pwd data string in the NOTES.)
Module Types Provided
All module types (auth, account, password and session) are provided.
Return Values
PAM_BUF_ERR Memory buffer error.
PAM_PERM_DENIED Permission denied.
PAM_AUTH_ERR Access to the system was denied.
PAM_CONV_ERR Conversation failure.
PAM_SUCCESS The function passes all checks.
PAM_USER_UNKNOWN The user is not known to the system.
PAM_CRED_ERR Failure involving user credentials.
PAM_NEW_AUTHTOK_REQD Authentication token is no longer valid; new one required.
PAM_SESSION_ERR Session failure.
PAM_TRY_AGAIN Failed preliminary check by service.
PAM_AUTHTOK_LOCK_BUSY Authentication token lock busy.
PAM_AUTHTOK_ERR Authentication token manipulation error.
PAM_SYSTEM_ERR System error.
Notes
This module uses the stress_new_pwd data string which tells pam_sm_chauthtok that pam_sm_acct_mgmt says we need a new password. The only possible value for this data string is \*(Aqyes\*(Aq.
Examples
#%PAM-1.0
#
# Any of the following will suffice
account required pam_stress.so
auth required pam_stress.so
password required pam_stress.so
session required pam_stress.so
See Also
pam.conf(5), pam.d(5), pam(8).
Authors
The pam_stress PAM module was developed by Andrew Morgan <[email protected]>. The man page for pam_stress was written by Lucas Ramage <[email protected]>.