PAM_STRESS(8) Linux-PAM Manual PAM_STRESS(8)
NAME
pam_stress - The stress-testing PAM module
SYNOPSIS
pam_stress.so [debug] [no_warn] [use_first_pass] [try_first_pass]
[rootok] [expired] [fail_1] [fail_2] [prelim] [required]
DESCRIPTION
The pam_stress PAM module is mainly intended to give the impression of
failing as a fully functioning module might.
OPTIONS
debug
Put lots of information in syslog. *NOTE* this option writes
passwords to syslog, so don't use anything sensitive when testing.
no_warn
Do not give warnings about things (otherwise warnings are issued
via the conversation function)
use_first_pass
Do not prompt for a password, for pam_sm_authentication function
just use item PAM_AUTHTOK.
try_first_pass
Do not prompt for a password unless there has been no previous
authentication token (item PAM_AUTHTOK is NULL)
rootok
This is intended for the pam_sm_chauthtok function and it instructs
this function to permit root to change the user's password without
entering the old password.
expired
An argument intended for the account and chauthtok module parts. It
instructs the module to act as if the user's password has expired
fail_1
This instructs the module to make its first function fail.
fail_2
This instructs the module to make its second function (if there is
one) fail.
prelim
For pam_sm_chauthtok, means fail on PAM_PRELIM_CHECK.
required
For pam_sm_chauthtok, means fail if the user hasn't already been
authenticated by this module. (See stress_new_pwd data string in
the NOTES.)
MODULE TYPES PROVIDED
All module types (auth, account, password and session) are provided.
RETURN VALUES
PAM_BUF_ERR
Memory buffer error.
PAM_PERM_DENIED
Permission denied.
PAM_AUTH_ERR
Access to the system was denied.
PAM_CONV_ERR
Conversation failure.
PAM_SUCCESS
The function passes all checks.
PAM_USER_UNKNOWN
The user is not known to the system.
PAM_CRED_ERR
Failure involving user credentials.
PAM_NEW_AUTHTOK_REQD
Authentication token is no longer valid; new one required.
PAM_SESSION_ERR
Session failure.
PAM_TRY_AGAIN
Failed preliminary check by service.
PAM_AUTHTOK_LOCK_BUSY
Authentication token lock busy.
PAM_AUTHTOK_ERR
Authentication token manipulation error.
PAM_SYSTEM_ERR
System error.
NOTES
This module uses the stress_new_pwd data string which tells
pam_sm_chauthtok that pam_sm_acct_mgmt says we need a new password. The
only possible value for this data string is 'yes'.
EXAMPLES
#%PAM-1.0
#
# Any of the following will suffice
account required pam_stress.so
auth required pam_stress.so
password required pam_stress.so
session required pam_stress.so
SEE ALSO
pam.conf(5), pam.d(5), pam(8).
AUTHORS
The pam_stress PAM module was developed by Andrew Morgan
<morgan@linux.kernel.org>. The man page for pam_stress was written by
Lucas Ramage <ramage.lucas@protonmail.com>.
Linux-PAM Manual 09/03/2021 PAM_STRESS(8)
Generated by dwww version 1.15 on Sat Jun 29 01:46:08 CEST 2024.