pam_opendirectory.8   [plain text]


.\"
.\" Copyright (c) 2009 Apple Inc. All rights reserved.
.\"
.\" @APPLE_LICENSE_HEADER_START@
.\" 
.\" This file contains Original Code and/or Modifications of Original Code
.\" as defined in and that are subject to the Apple Public Source License
.\" Version 2.0 (the 'License'). You may not use this file except in
.\" compliance with the License. Please obtain a copy of the License at
.\" http://www.opensource.apple.com/apsl/ and read it before using this
.\" file.
.\" 
.\" The Original Code and all software distributed under the License are
.\" distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
.\" EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
.\" INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
.\" FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
.\" Please see the License for the specific language governing rights and
.\" limitations under the License.
.\" 
.\" @APPLE_LICENSE_HEADER_END@
.\"
.Dd February 7, 2009
.Dt pam_opendirectory 8
.Os
.Sh NAME
.Nm pam_opendirectory
.Nd OpenDirectory PAM module
.Sh SYNOPSIS
.Op Ar service-name
.Ar function-class
.Ar control-flag
pam_opendirectory
.Op Ar options
.Sh DESCRIPTION
The OpenDirectory PAM module supports the authentication, account management and password management function classes.  In terms of the
.Ar function-class
parameter, these are
.Dq Li auth ,
.Dq Li account
and
.Dq Li password
respectively.
.Ss The OpenDirectory Authentication Module
The OpenDirectory authenticaion module permits or denies users based on OpenDirectory password authentication.
.Pp
The following option may be passed to this authenticaion module:
.Bl -tag
.It Cm nullok
Allow null passwords.
.El
.Ss The OpenDirectory Account Managemnt Module
The OpenDirectory account management module permits or denies users based whether the account is enabled in OpenDirectory.
.Pp
The following option may be passed to this account management module:
.Bl -tag
.It Cm no_shell_check
Skip validating the user's shell.
.El
.Ss The OpenDirectory Password Management Module
The OpenDirectory password management module supports password changing and enforces the OpenDirectory password policy.
.Sh SEE ALSO
.Xr pam.conf 5 ,
.Xr pam 8 ,
.Xr pwpolicy 8 ,
.Xr DirectoryService 8