head	1.6;
access;
symbols
	RELENG_8_4:1.6.0.2
	RELENG_9_1_0_RELEASE:1.5.36.1.4.2
	RELENG_9_1:1.5.36.1.0.4
	RELENG_9_1_BP:1.5.36.1
	RELENG_8_3_0_RELEASE:1.5.30.1.8.1
	RELENG_8_3:1.5.30.1.0.8
	RELENG_8_3_BP:1.5.30.1
	RELENG_9_0_0_RELEASE:1.5.36.1.2.1
	RELENG_9_0:1.5.36.1.0.2
	RELENG_9_0_BP:1.5.36.1
	RELENG_9:1.5.0.36
	RELENG_9_BP:1.5
	RELENG_7_4_0_RELEASE:1.5.34.1
	RELENG_8_2_0_RELEASE:1.5.30.1.6.1
	RELENG_7_4:1.5.0.34
	RELENG_7_4_BP:1.5
	RELENG_8_2:1.5.30.1.0.6
	RELENG_8_2_BP:1.5.30.1
	RELENG_8_1_0_RELEASE:1.5.30.1.4.1
	RELENG_8_1:1.5.30.1.0.4
	RELENG_8_1_BP:1.5.30.1
	RELENG_7_3_0_RELEASE:1.5.32.1
	RELENG_7_3:1.5.0.32
	RELENG_7_3_BP:1.5
	RELENG_8_0_0_RELEASE:1.5.30.1.2.1
	RELENG_8_0:1.5.30.1.0.2
	RELENG_8_0_BP:1.5.30.1
	RELENG_8:1.5.0.30
	RELENG_8_BP:1.5
	RELENG_7_2_0_RELEASE:1.5.28.1
	RELENG_7_2:1.5.0.28
	RELENG_7_2_BP:1.5
	RELENG_7_1_0_RELEASE:1.5.26.1
	RELENG_6_4_0_RELEASE:1.5.24.1
	RELENG_7_1:1.5.0.26
	RELENG_7_1_BP:1.5
	RELENG_6_4:1.5.0.24
	RELENG_6_4_BP:1.5
	RELENG_7_0_0_RELEASE:1.5
	RELENG_6_3_0_RELEASE:1.5
	RELENG_7_0:1.5.0.22
	RELENG_7_0_BP:1.5
	RELENG_6_3:1.5.0.20
	RELENG_6_3_BP:1.5
	RELENG_7:1.5.0.18
	RELENG_7_BP:1.5
	RELENG_6_2_0_RELEASE:1.5
	RELENG_6_2:1.5.0.16
	RELENG_6_2_BP:1.5
	RELENG_5_5_0_RELEASE:1.5
	RELENG_5_5:1.5.0.14
	RELENG_5_5_BP:1.5
	RELENG_6_1_0_RELEASE:1.5
	RELENG_6_1:1.5.0.12
	RELENG_6_1_BP:1.5
	RELENG_6_0_0_RELEASE:1.5
	RELENG_6_0:1.5.0.10
	RELENG_6_0_BP:1.5
	RELENG_6:1.5.0.8
	RELENG_6_BP:1.5
	RELENG_5_4_0_RELEASE:1.5
	RELENG_5_4:1.5.0.6
	RELENG_5_4_BP:1.5
	RELENG_5_3_0_RELEASE:1.5
	RELENG_5_3:1.5.0.4
	RELENG_5_3_BP:1.5
	RELENG_5:1.5.0.2
	RELENG_5_BP:1.5
	RELENG_5_2_1_RELEASE:1.4
	RELENG_5_2_0_RELEASE:1.4
	RELENG_5_2:1.4.0.2
	RELENG_5_2_BP:1.4
	RELENG_5_1_0_RELEASE:1.3
	RELENG_5_1:1.3.0.4
	RELENG_5_1_BP:1.3
	RELENG_5_0_0_RELEASE:1.3
	RELENG_5_0:1.3.0.2
	RELENG_5_0_BP:1.3;
locks; strict;
comment	@# @;


1.6
date	2012.11.17.01.49.03;	author svnexp;	state Exp;
branches
	1.6.2.1;
next	1.5;

1.5
date	2004.06.06.11.46.29;	author schweikh;	state Exp;
branches
	1.5.8.1
	1.5.18.1
	1.5.24.1
	1.5.26.1
	1.5.28.1
	1.5.30.1
	1.5.32.1
	1.5.34.1
	1.5.36.1;
next	1.4;

1.4
date	2003.06.01.00.34.38;	author des;	state Exp;
branches;
next	1.3;

1.3
date	2001.12.05.21.26.00;	author des;	state Exp;
branches;
next	1.2;

1.2
date	2001.12.05.21.04.34;	author des;	state Exp;
branches;
next	1.1;

1.1
date	2001.12.05.20.59.38;	author des;	state Exp;
branches;
next	;

1.6.2.1
date	2012.11.17.01.49.03;	author svnexp;	state dead;
branches;
next	1.6.2.2;

1.6.2.2
date	2013.03.28.13.02.42;	author svnexp;	state Exp;
branches;
next	;

1.5.8.1
date	2012.11.17.07.39.04;	author svnexp;	state Exp;
branches;
next	;

1.5.18.1
date	2012.11.17.08.01.18;	author svnexp;	state Exp;
branches;
next	;

1.5.24.1
date	2008.10.02.02.57.24;	author kensmith;	state Exp;
branches;
next	;

1.5.26.1
date	2008.11.25.02.59.29;	author kensmith;	state Exp;
branches;
next	;

1.5.28.1
date	2009.04.15.03.14.26;	author kensmith;	state Exp;
branches;
next	;

1.5.30.1
date	2009.08.03.08.13.06;	author kensmith;	state Exp;
branches
	1.5.30.1.2.1
	1.5.30.1.4.1
	1.5.30.1.6.1
	1.5.30.1.8.1;
next	1.5.30.2;

1.5.30.2
date	2012.11.17.10.35.56;	author svnexp;	state Exp;
branches;
next	;

1.5.30.1.2.1
date	2009.10.25.01.10.29;	author kensmith;	state Exp;
branches;
next	;

1.5.30.1.4.1
date	2010.06.14.02.09.06;	author kensmith;	state Exp;
branches;
next	;

1.5.30.1.6.1
date	2010.12.21.17.09.25;	author kensmith;	state Exp;
branches;
next	;

1.5.30.1.8.1
date	2012.03.03.06.15.13;	author kensmith;	state Exp;
branches;
next	1.5.30.1.8.2;

1.5.30.1.8.2
date	2012.11.17.08.24.38;	author svnexp;	state Exp;
branches;
next	;

1.5.32.1
date	2010.02.10.00.26.20;	author kensmith;	state Exp;
branches;
next	;

1.5.34.1
date	2010.12.21.17.10.29;	author kensmith;	state Exp;
branches;
next	1.5.34.2;

1.5.34.2
date	2012.11.17.08.16.37;	author svnexp;	state Exp;
branches;
next	;

1.5.36.1
date	2011.09.23.00.51.37;	author kensmith;	state Exp;
branches
	1.5.36.1.2.1
	1.5.36.1.4.1;
next	1.5.36.2;

1.5.36.2
date	2012.11.17.11.36.11;	author svnexp;	state Exp;
branches;
next	;

1.5.36.1.2.1
date	2011.11.11.04.20.22;	author kensmith;	state Exp;
branches;
next	1.5.36.1.2.2;

1.5.36.1.2.2
date	2012.11.17.08.36.11;	author svnexp;	state Exp;
branches;
next	;

1.5.36.1.4.1
date	2012.08.05.23.54.33;	author kensmith;	state Exp;
branches;
next	1.5.36.1.4.2;

1.5.36.1.4.2
date	2012.11.17.08.47.00;	author svnexp;	state Exp;
branches;
next	;


desc
@@


1.6
log
@Switching exporter and resync
@
text
@
This directory contains configuration files for the Pluggable
Authentication Modules (PAM) library.

Each file details the module chain for a single service, and must be
named after that service.  If no configuration file is found for a
particular service, the /etc/pam.d/other is used instead.  If that
file does not exist, /etc/pam.conf is searched for entries matching
the specified service or, failing that, the "other" service.

See the pam(8) manual page for an explanation of the workings of the
PAM library and descriptions of the various files and modules.  Below
is a summary of the format for the pam.conf and /etc/pam.d/* files.

Configuration lines take the following form:

module-type	control-flag	module-path	arguments

Comments are introduced with a hash mark ('#').  Blank lines and lines
consisting entirely of comments are ignored.

The meanings of the different fields are as follows:

 module-type:
   auth:      prompt for a password to authenticate that the user is
              who they say they are, and set any credentials.
   account:   non-authentication based authorization, based on time,
              resources, etc.
   session:   housekeeping before and/or after login.
   password:  update authentication tokens.

 control-flag: How libpam handles success or failure of the module.
   required:   success is required; on failure all remaining
               modules are run, but the request will be denied.
   requisite:  success is required, and on failure no remaining
               modules are run.
   sufficient: success is sufficient, and if no previous required
               module failed, no remaining modules are run.
   binding:    success is sufficient; on failure all remaining
               modules are run, but the request will be denied.
   optional:   ignored unless the other modules return PAM_IGNORE.

 arguments: Module-specific options, plus some generic ones:
   debug:           syslog debug info.
   no_warn:         return no warning messages to the application.
                    Remove this to feed back to the user the
                    reason(s) they are being rejected.
   use_first_pass:  try authentication using password from the
                    preceding auth module.
   try_first_pass:  first try authentication using password from
                    the preceding auth module, and if that fails
                    prompt for a new password.
   use_mapped_pass: convert cleartext password to a crypto key.
   expose_account:  allow printing more info about the user when
                    prompting.

Note that having a "sufficient" module as the last entry for a
particular service and module type may result in surprising behaviour.
To get the intended semantics, add a "required" entry listing the
pam_deny module at the end of the chain.

$FreeBSD: head/etc/pam.d/README 130151 2004-06-06 11:46:29Z schweikh $
@


1.6.2.1
log
@file README was added on branch RELENG_8_4 on 2013-03-28 13:02:42 +0000
@
text
@d1 62
@


1.6.2.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 62

This directory contains configuration files for the Pluggable
Authentication Modules (PAM) library.

Each file details the module chain for a single service, and must be
named after that service.  If no configuration file is found for a
particular service, the /etc/pam.d/other is used instead.  If that
file does not exist, /etc/pam.conf is searched for entries matching
the specified service or, failing that, the "other" service.

See the pam(8) manual page for an explanation of the workings of the
PAM library and descriptions of the various files and modules.  Below
is a summary of the format for the pam.conf and /etc/pam.d/* files.

Configuration lines take the following form:

module-type	control-flag	module-path	arguments

Comments are introduced with a hash mark ('#').  Blank lines and lines
consisting entirely of comments are ignored.

The meanings of the different fields are as follows:

 module-type:
   auth:      prompt for a password to authenticate that the user is
              who they say they are, and set any credentials.
   account:   non-authentication based authorization, based on time,
              resources, etc.
   session:   housekeeping before and/or after login.
   password:  update authentication tokens.

 control-flag: How libpam handles success or failure of the module.
   required:   success is required; on failure all remaining
               modules are run, but the request will be denied.
   requisite:  success is required, and on failure no remaining
               modules are run.
   sufficient: success is sufficient, and if no previous required
               module failed, no remaining modules are run.
   binding:    success is sufficient; on failure all remaining
               modules are run, but the request will be denied.
   optional:   ignored unless the other modules return PAM_IGNORE.

 arguments: Module-specific options, plus some generic ones:
   debug:           syslog debug info.
   no_warn:         return no warning messages to the application.
                    Remove this to feed back to the user the
                    reason(s) they are being rejected.
   use_first_pass:  try authentication using password from the
                    preceding auth module.
   try_first_pass:  first try authentication using password from
                    the preceding auth module, and if that fails
                    prompt for a new password.
   use_mapped_pass: convert cleartext password to a crypto key.
   expose_account:  allow printing more info about the user when
                    prompting.

Note that having a "sufficient" module as the last entry for a
particular service and module type may result in surprising behaviour.
To get the intended semantics, add a "required" entry listing the
pam_deny module at the end of the chain.

$FreeBSD: releng/8.4/etc/pam.d/README 130151 2004-06-06 11:46:29Z schweikh $
@


1.5
log
@Removed whitespace at BOF, EOL & EOF.
@
text
@d62 1
a62 1
$FreeBSD$
@


1.5.18.1
log
@Switch importer
@
text
@d62 1
a62 1
$FreeBSD: stable/7/etc/pam.d/README 130151 2004-06-06 11:46:29Z schweikh $
@


1.5.8.1
log
@Switch importer
@
text
@d62 1
a62 1
$FreeBSD: stable/6/etc/pam.d/README 130151 2004-06-06 11:46:29Z schweikh $
@


1.5.36.1
log
@SVN rev 225736 on 2011-09-23 00:51:37Z by kensmith

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by:	re (implicit)
@
text
@@


1.5.36.2
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242902
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242902 | dteske | 2012-11-11 23:29:45 +0000 (Sun, 11 Nov 2012) | 10 lines
## SVN ##
## SVN ## Fix a regression introduced by SVN r211417 that saw the breakage of a feature
## SVN ## documented in usr.sbin/sysinstall/help/shortcuts.hlp (reproduced below):
## SVN ##
## SVN ## If /usr/sbin/sysinstall is linked to another filename, say
## SVN ## `/usr/local/bin/configPackages', then the basename will be used
## SVN ## as an implicit command name.
## SVN ##
## SVN ## Reviewed by:	adrian (co-mentor)
## SVN ## Approved by:	adrian (co-mentor)
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d62 1
a62 1
$FreeBSD: stable/9/etc/pam.d/README 130151 2004-06-06 11:46:29Z schweikh $
@


1.5.36.1.4.1
log
@SVN rev 239080 on 2012-08-05 23:54:33Z by kensmith

Copy stable/9 to releng/9.1 as part of the 9.1-RELEASE release process.

Approved by:	re (implicit)
@
text
@@


1.5.36.1.4.2
log
@Switch importer
@
text
@d62 1
a62 1
$FreeBSD: releng/9.1/etc/pam.d/README 130151 2004-06-06 11:46:29Z schweikh $
@


1.5.36.1.2.1
log
@SVN rev 227445 on 2011-11-11 04:20:22Z by kensmith

Copy stable/9 to releng/9.0 as part of the FreeBSD 9.0-RELEASE release
cycle.

Approved by:	re (implicit)
@
text
@@


1.5.36.1.2.2
log
@Switch importer
@
text
@d62 1
a62 1
$FreeBSD: releng/9.0/etc/pam.d/README 130151 2004-06-06 11:46:29Z schweikh $
@


1.5.34.1
log
@SVN rev 216618 on 2010-12-21 17:10:29Z by kensmith

Copy stable/7 to releng/7.4 in preparation for FreeBSD-7.4 release.

Approved by:	re (implicit)
@
text
@@


1.5.34.2
log
@Switch importer
@
text
@d62 1
a62 1
$FreeBSD: releng/7.4/etc/pam.d/README 130151 2004-06-06 11:46:29Z schweikh $
@


1.5.32.1
log
@SVN rev 203736 on 2010-02-10 00:26:20Z by kensmith

Copy stable/7 to releng/7.3 as part of the 7.3-RELEASE process.

Approved by:	re (implicit)
@
text
@@


1.5.30.1
log
@SVN rev 196045 on 2009-08-03 08:13:06Z by kensmith

Copy head to stable/8 as part of 8.0 Release cycle.

Approved by:	re (Implicit)
@
text
@@


1.5.30.2
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242909
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242909 | dim | 2012-11-12 07:47:19 +0000 (Mon, 12 Nov 2012) | 20 lines
## SVN ##
## SVN ## MFC r242625:
## SVN ##
## SVN ## Remove duplicate const specifiers in many drivers (I hope I got all of
## SVN ## them, please let me know if not).  Most of these are of the form:
## SVN ##
## SVN ## static const struct bzzt_type {
## SVN ##       [...list of members...]
## SVN ## } const bzzt_devs[] = {
## SVN ##       [...list of initializers...]
## SVN ## };
## SVN ##
## SVN ## The second const is unnecessary, as arrays cannot be modified anyway,
## SVN ## and if the elements are const, the whole thing is const automatically
## SVN ## (e.g. it is placed in .rodata).
## SVN ##
## SVN ## I have verified this does not change the binary output of a full kernel
## SVN ## build (except for build timestamps embedded in the object files).
## SVN ##
## SVN ## Reviewed by:	yongari, marius
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d62 1
a62 1
$FreeBSD: stable/8/etc/pam.d/README 130151 2004-06-06 11:46:29Z schweikh $
@


1.5.30.1.8.1
log
@SVN rev 232438 on 2012-03-03 06:15:13Z by kensmith

Copy stable/8 to releng/8.3 as part of 8.3-RELEASE release cycle.

Approved by:	re (implicit)
@
text
@@


1.5.30.1.8.2
log
@Switch importer
@
text
@d62 1
a62 1
$FreeBSD: releng/8.3/etc/pam.d/README 130151 2004-06-06 11:46:29Z schweikh $
@


1.5.30.1.6.1
log
@SVN rev 216617 on 2010-12-21 17:09:25Z by kensmith

Copy stable/8 to releng/8.2 in preparation for FreeBSD-8.2 release.

Approved by:	re (implicit)
@
text
@@


1.5.30.1.4.1
log
@SVN rev 209145 on 2010-06-14 02:09:06Z by kensmith

Copy stable/8 to releng/8.1 in preparation for 8.1-RC1.

Approved by:	re (implicit)
@
text
@@


1.5.30.1.2.1
log
@SVN rev 198460 on 2009-10-25 01:10:29Z by kensmith

Copy stable/8 to releng/8.0 as part of 8.0-RELEASE release procedure.

Approved by:	re (implicit)
@
text
@@


1.5.28.1
log
@SVN rev 191087 on 2009-04-15 03:14:26Z by kensmith

Create releng/7.2 from stable/7 in preparation for 7.2-RELEASE.

Approved by:	re (implicit)
@
text
@@


1.5.26.1
log
@SVN rev 185281 on 2008-11-25 02:59:29Z by kensmith

Create releng/7.1 in preparation for moving into RC phase of 7.1 release
cycle.

Approved by:	re (implicit)
@
text
@@


1.5.24.1
log
@SVN rev 183531 on 2008-10-02 02:57:24Z by kensmith

Create releng/6.4 from stable/6 in preparation for 6.4-RC1.

Approved by:	re (implicit)
@
text
@@


1.4
log
@Try to describe the control flags a little better.
@
text
@d23 1
a23 1
 
d31 1
a31 1
 
d42 1
a42 1
 
d56 1
a56 1
 
@


1.3
log
@Awright, egg on my face.  I should have taken more time with this.  The
conversion script generated the wrong format, so the configuration files
didn't actually work.  Good thing I hadn't thrown the switch yet...

Sponsored by:	DARPA, NAI Labs (but the f***ups are all mine)
@
text
@d33 2
a34 2
   required:   success is required, and on failure all remaining
               modules are run.
d39 2
d62 1
a62 1
$FreeBSD: src/etc/pam.d/README,v 1.2 2001/12/05 21:04:34 des Exp $
@


1.2
log
@Forced commit to note that previous commit was

Sponsored by:	DARPA, NAI Labs
@
text
@d17 1
a17 1
service-name	module-type	control-flag	module-path	arguments
d22 1
a22 1
The meanings of the various fields are as follows:
d60 1
a60 1
$FreeBSD: src/etc/pam.d/README,v 1.1 2001/12/05 20:59:38 des Exp $
@


1.1
log
@Short README for /etc/pam.d, mostly extracted from the comments in pam.conf.
@
text
@d60 1
a60 1
$FreeBSD$
@

