|author||Steve Langasek <email@example.com>||2008-08-25 16:39:42 -0700|
|committer||Steve Langasek <firstname.lastname@example.org>||2019-01-03 17:28:27 -0800|
first cut of a manpage for pam-auth-update
Diffstat (limited to 'debian')
2 files changed, 102 insertions, 0 deletions
diff --git a/debian/libpam-runtime.manpages b/debian/libpam-runtime.manpages
index fe4dc477..1e7d9aed 100644
@@ -2,3 +2,4 @@ debian/tmp/usr/share/man/man5/pam.conf.5
diff --git a/debian/local/pam-auth-update.8 b/debian/local/pam-auth-update.8
new file mode 100644
@@ -0,0 +1,101 @@
+.\" Copyright (C) 2008 Canonical Ltd.
+.\" Author: Steve Langasek <email@example.com>
+.\" This program is free software; you can redistribute it and/or modify
+.\" it under the terms of version 3 of the GNU General Public License as
+.\" published by the Free Software Foundation.
+.\" .\" This program is distributed in the hope that it will be useful,
+.\" but WITHOUT ANY WARRANTY; without even the implied warranty of
+.\" MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+.\" GNU General Public License for more details.
+.\" You should have received a copy of the GNU General Public License
+.\" along with this program; if not, write to the Free Software
+.\" Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301,
+.TH "PAM\-AUTH\-UPDATE" "8" "08/23/2008" "Debian"
+pam\-auth\-update - manage PAM configuration using packaged profiles
+.RB [ \-\-package " [" \-\-remove
+.IR profile " [" profile\fR... "]]]"
+.RB [ \-\-force ]
+is a utility that permits configuring the central authentication policy
+for the system using pre-defined profiles as supplied by PAM module
+Profiles shipped in the
+directory specify the modules, with options, to enable; the preferred
+ordering with respect to other profiles; and whether a profile should be
+enabled by default.
+Packages providing PAM modules register their profiles at install time
+.BR "pam\-auth\-update \-\-package" .
+Selection of profiles is done using the standard debconf interface.
+The profile selection question will be asked at `medium' priority when
+packages are added or removed, so no user interaction is required by
+Users may invoke
+directly to change their authentication configuration.
+The script makes every effort to respect local changes to
+Local modifications to the list of module options will be preserved, and
+additions of modules within the managed portion of the stack will cause
+to treat the config files as locally modified and not make further
+changes to the config files unless given the
+If the user specifies that
+should override local configuration changes, the locally-modified files
+will be saved in
+with a suffix of
+.IR "\.pam\-old" .
+Indicate that the caller is a package maintainer script; lowers the
+priority of debconf questions to `medium' so that the user is not
+prompted by default.
+.B \-\-remove \fIprofile \fR[\fIprofile\fR...]
+Remove the specified profiles from the system configuration.
+.B pam\-auth\-update \-\-remove
+should be used to remove profiles from the configuration before the
+modules they reference are removed from disk, to ensure that PAM is in a
+consistent and usable state at all times during package upgrades or
+Overwrite the current PAM configuration, without prompting.
+.B must not
+be used by package maintainer scripts; it is intended for use by
+Global configuration of PAM, affecting all installed services.
+Package-supplied authentication profiles.
+Steve Langasek <firstname.lastname@example.org>
+Copyright (C) 2008 Canonical Ltd.
+.SH "SEE ALSO"
+PAM(7), pam.d(5), debconf(7)