The authentication component
(
pam_sm_authenticate()),
returns
PAM_SUCCESS
in two cases:
- The user does not have OPIE enabled.
- The user has OPIE enabled, and the remote host is listed as a trusted
host in
/etc/opieaccess,
and the user does not have a file named
amp;.opiealways
in his home directory.
Otherwise, it returns
PAM_AUTH_ERR.
The following options may be passed to the authentication module:
| allow_local
|
| |
Normally, local logins are subjected to the same restrictions as
remote logins from
"localhost".
This option causes
pam_opieaccess
to always allow local logins.
|
| debug
|
syslog(3)
debugging information at
LOG_DEBUG
level.
|
| no_warn
|
suppress warning messages to the user.
These messages include reasons why the user's authentication attempt
was declined.
|
|
