Black Box ACS120 Podręcznik Użytkownika Pobierz pdf (Strona 342)

Appendix D - Linux-PAM

342 BLACK BOX ® Advanced Console Server

Newest Syntax

The more elaborate (newer) syntax is much more specific and gives the administrator a great

deal of control over how the user is authenticated. This form of the control flag is delimited

with square brackets and consists of a series of value=action tokens:

[value1=action1 value2=action2 ...]

Here, valueI is one of the following return values: success; open_err; symbol_err; service_err;

system_err; buf_err; perm_denied; auth_err; cred_insufficient; authinfo_unavail;

user_unknown; maxtries; new_authtok_reqd; acct_expired; session_err; cred_unavail;

cred_expired; cred_err; no_module_data; conv_err; authtok_err; authtok_recover_err;

authtok_lock_busy; authtok_disable_aging; try_again; ignore; abort; authtok_expired;

module_unknown; bad_item; and default. The last of these (default) can be used to set the

action for those return values that are not explicitly defined.

The action can be a positive integer or one of the following tokens: ignore, ok, done, bad, die,

and reset.

Optional As its name suggests, this control-flag marks the module as not being

critical to the success or failure of the user’s application for service. In

general, Linux-PAM ignores such a module when determining if the

module stack will succeed or fail. However, in the absence of any

definite successes or failures of previous or subsequent stacked modules

this module will determine the nature of the response to the

application. One example of this latter case is when the other modules

return something like PAM_IGNORE.

A positive integer When specified as the action, can be used to indicate that the

next J modules of the current type will be skipped. In this way,

the administrator can develop a moderately sophisticated stack of

modules with a number of different paths of execution. Which

path is taken can be determined by the reactions of individual

modules.

Ignore When used with a stack of modules, the module’s return status

will not contribute to the return code the application obtains.

1 2 ... 337 338 339 340 341 342 343 344 345 346 347 ... 449 450

Brak uwag

Black Box ACS120 Podręcznik Użytkownika Strona 342