NAME
pam_deny —
Deny PAM module
SYNOPSIS
[service-name] module-type control-flag pam_deny [options]
DESCRIPTION
The deny authentication service module for PAM provides functionality for all the PAM categories: authentication, account management, session management and password management. In terms of the module-type parameter, these are the “auth”,
“account”,
“session”, and
“password” features.
The Deny module will universally deny all requests. It is primarily of use during testing, and to “null-out” unwanted functionality.
The following options may be passed to the module:
debug- syslog(3) debugging information at
LOG_DEBUGlevel. no_warn- suppress warning messages to the user. These messages include reasons why the user's authentication attempt was declined.
prelim_ignore- for password management (“
password” feature), returnPAM_IGNOREin the preliminary phase. This allows the module to be used (with the “required” flag) at the end of a chain of “sufficient” modules with this service (where the entire chain is in fact run twice).