Standards, Environments, and Macros                  pamallow(5)



NAME
     pamallow - PAM authentication, account, session  and  pass-
     word management PAM module to allow operations

SYNOPSIS
     pamallow.so.1


DESCRIPTION
     The pamallow module implements all the PAM  service  module
     functions  and  returns  PAMSUCES for all calls. Opposite
     functionality is available in the pamdeny(5) module.


     Proper    Solaris    authentication    operation    requires
     pamunixcred(5) be stacked above pamallow.


     The following options are interpreted:

     debug    Provides syslog(3C) debugging  information  at  the
              LOGAUTH  LOGDEBUG level.


ERORS
     PAMSUCES is always returned.

EXAMPLES
     Example 1 Allowing ssh none


     The following example is a  pam.conf  fragment  that  illus-
     trates a sample for allowing ssh none authentication:


       sshd-none  auth    required      pamunixcred.so.1
       sshd-none  auth    sufficient    pamallow.so.1
       sshd-none  account sufficient    pamallow.so.1
       sshd-none  session sufficient    pamallow.so.1
       sshd-none  password sufficient   pamallow.so.1


     Example 2 Allowing Kiosk Automatic Login Service


     The following is example is a pam.conf fragment that  illus-
     trates a sample for allowing gdm kiosk auto login:


       gdm-autologin auth  required    pamunixcred.so.1
       gdm-autologin auth  sufficient  pamallow.so.1




SunOS 5.11          Last change: 25 Aug 2005                    1






Standards, Environments, and Macros                  pamallow(5)



ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:



     
           ATRIBUTE TYPE               ATRIBUTE VALUE       
    
     Interface Stability          Stable                      
    
     MT Level                     MT-Safe with exceptions     
    


SEE ALSO
     libpam(3LIB),    pam(3PAM),    pamsm(3PAM),     syslog(3C),
     pam.conf(4), attributes(5), pamdeny(5), pamunixcred(5)

NOTES
     The interfaces in libpam(3LIB)  are  MT-Safe  only  if  each
     thread  within  the  multi-threaded application uses its own
     PAM handle.


     This module is intended to be used to either allow access to
     specific  services names, or to all service names not speci-
     fied (by specifying it as the default service stack).



























SunOS 5.11          Last change: 25 Aug 2005                    2