163 lines
4.3 KiB
HTML
163 lines
4.3 KiB
HTML
|
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<HTML><HEAD><TITLE>Man page of PAM-AUTH-UPDATE</TITLE>
|
|
</HEAD><BODY>
|
|
<H1>PAM-AUTH-UPDATE</H1>
|
|
Section: Maintenance Commands (8)<BR>Updated: 08/23/2008<BR><A HREF="#index">Index</A>
|
|
<A HREF="/cgi-bin/man/man2html">Return to Main Contents</A><HR>
|
|
|
|
<A NAME="lbAB"> </A>
|
|
<H2>NAME</H2>
|
|
|
|
pam-auth-update - manage PAM configuration using packaged profiles
|
|
<A NAME="lbAC"> </A>
|
|
<H2>SYNOPSIS</H2>
|
|
|
|
<B>pam-auth-update</B>
|
|
|
|
[<B>--package</B> [<B>--remove</B>
|
|
|
|
<I>profile</I> [<I>profile</I>...]]]
|
|
|
|
[<B>--force</B>]
|
|
|
|
<A NAME="lbAD"> </A>
|
|
<H2>DESCRIPTION</H2>
|
|
|
|
<I>pam-auth-update</I>
|
|
|
|
is a utility that permits configuring the central authentication policy
|
|
for the system using pre-defined profiles as supplied by PAM module
|
|
packages.
|
|
Profiles shipped in the
|
|
<I>/usr/share/pam-configs/</I>
|
|
|
|
directory specify the modules, with options, to enable; the preferred
|
|
ordering with respect to other profiles; and whether a profile should be
|
|
enabled by default.
|
|
Packages providing PAM modules register their profiles at install time
|
|
by calling
|
|
<B>pam-auth-update --package</B>.
|
|
|
|
Selection of profiles is done using the standard debconf interface.
|
|
The profile selection question will be asked at `medium' priority when
|
|
packages are added or removed, so no user interaction is required by
|
|
default.
|
|
Users may invoke
|
|
<B>pam-auth-update</B>
|
|
|
|
directly to change their authentication configuration.
|
|
<P>
|
|
|
|
The script makes every effort to respect local changes to
|
|
<I>/etc/pam.d/common-*.</I>
|
|
|
|
Local modifications to the list of module options will be preserved, and
|
|
additions of modules within the managed portion of the stack will cause
|
|
<B>pam-auth-update</B>
|
|
|
|
to treat the config files as locally modified and not make further
|
|
changes to the config files unless given the
|
|
<B>--force</B>
|
|
|
|
option.
|
|
<P>
|
|
|
|
If the user specifies that
|
|
<B>pam-auth-update</B>
|
|
|
|
should override local configuration changes, the locally-modified files
|
|
will be saved in
|
|
<I>/etc/pam.d/</I>
|
|
|
|
with a suffix of
|
|
<I>.pam-old</I>.
|
|
|
|
<A NAME="lbAE"> </A>
|
|
<H2>OPTIONS</H2>
|
|
|
|
<DL COMPACT>
|
|
<DT id="1"><B>--package</B>
|
|
|
|
<DD>
|
|
Indicate that the caller is a package maintainer script; lowers the
|
|
priority of debconf questions to `medium' so that the user is not
|
|
prompted by default.
|
|
<DT id="2"><B>--enable </B><I>profile </I>[<I>profile</I>...]
|
|
|
|
<DD>
|
|
Enable the specified profiles in system configuration. This is used to
|
|
enable profiles that are not on by default.
|
|
<DT id="3"><B>--remove </B><I>profile </I>[<I>profile</I>...]
|
|
|
|
<DD>
|
|
Remove the specified profiles from the system configuration.
|
|
<B>pam-auth-update --remove</B>
|
|
|
|
should be used to remove profiles from the configuration before the
|
|
modules they reference are removed from disk, to ensure that PAM is in a
|
|
consistent and usable state at all times during package upgrades or
|
|
removals.
|
|
<DT id="4"><B>--force</B>
|
|
|
|
<DD>
|
|
Overwrite the current PAM configuration, without prompting.
|
|
This option
|
|
<B>must not</B>
|
|
|
|
be used by package maintainer scripts; it is intended for use by
|
|
administrators only.
|
|
</DL>
|
|
<A NAME="lbAF"> </A>
|
|
<H2>FILES</H2>
|
|
|
|
<P>
|
|
|
|
<I>/etc/pam.d/common-*</I>
|
|
|
|
<DL COMPACT><DT id="5"><DD>
|
|
Global configuration of PAM, affecting all installed services.
|
|
</DL>
|
|
|
|
<P>
|
|
|
|
<I>/usr/share/pam-configs/</I>
|
|
|
|
<DL COMPACT><DT id="6"><DD>
|
|
Package-supplied authentication profiles.
|
|
</DL>
|
|
|
|
<A NAME="lbAG"> </A>
|
|
<H2>AUTHOR</H2>
|
|
|
|
Steve Langasek <<A HREF="mailto:steve.langasek@canonical.com">steve.langasek@canonical.com</A>>
|
|
<A NAME="lbAH"> </A>
|
|
<H2>COPYRIGHT</H2>
|
|
|
|
Copyright (C) 2008 Canonical Ltd.
|
|
<A NAME="lbAI"> </A>
|
|
<H2>SEE ALSO</H2>
|
|
|
|
<A HREF="/cgi-bin/man/man2html?7+PAM">PAM</A>(7), <A HREF="/cgi-bin/man/man2html?5+pam.d">pam.d</A>(5), <A HREF="/cgi-bin/man/man2html?7+debconf">debconf</A>(7)
|
|
<P>
|
|
|
|
<HR>
|
|
<A NAME="index"> </A><H2>Index</H2>
|
|
<DL>
|
|
<DT id="7"><A HREF="#lbAB">NAME</A><DD>
|
|
<DT id="8"><A HREF="#lbAC">SYNOPSIS</A><DD>
|
|
<DT id="9"><A HREF="#lbAD">DESCRIPTION</A><DD>
|
|
<DT id="10"><A HREF="#lbAE">OPTIONS</A><DD>
|
|
<DT id="11"><A HREF="#lbAF">FILES</A><DD>
|
|
<DT id="12"><A HREF="#lbAG">AUTHOR</A><DD>
|
|
<DT id="13"><A HREF="#lbAH">COPYRIGHT</A><DD>
|
|
<DT id="14"><A HREF="#lbAI">SEE ALSO</A><DD>
|
|
</DL>
|
|
<HR>
|
|
This document was created by
|
|
<A HREF="/cgi-bin/man/man2html">man2html</A>,
|
|
using the manual pages.<BR>
|
|
Time: 00:06:14 GMT, March 31, 2021
|
|
</BODY>
|
|
</HTML>
|