path: root/modules/pam_access/access.conf.5.xml
diff options
authorThorsten Kukuk <>2008-04-21 11:21:12 +0000
committerThorsten Kukuk <>2008-04-21 11:21:12 +0000
commitaeccee4585ab2ea6deab9cbebc7afc67b7196a80 (patch)
treede848926000e8b5a9d970b4a7da44abd65b370c5 /modules/pam_access/access.conf.5.xml
parent902026536a826400014a7508b008e41269d081e6 (diff)
Relevant BUGIDs:
Purpose of commit: bugfix Commit summary: --------------- 2008-04-21 Thorsten Kukuk <> * modules/pam_access/access.conf.5.xml: Document changed behavior of LOCAL keyword. * modules/pam_access/pam_access.c: Add from_remote_host to struct login_info to change behavior of LOCAL keyword: if PAM_RHOST is not set, LOCAL will be true.
Diffstat (limited to 'modules/pam_access/access.conf.5.xml')
1 files changed, 5 insertions, 2 deletions
diff --git a/modules/pam_access/access.conf.5.xml b/modules/pam_access/access.conf.5.xml
index f8eb7a4e..17185172 100644
--- a/modules/pam_access/access.conf.5.xml
+++ b/modules/pam_access/access.conf.5.xml
@@ -69,8 +69,11 @@
internet network numbers (end with "."), internet network addresses
with network mask (where network mask can be a decimal number or an
internet address also), <emphasis>ALL</emphasis> (which always matches)
- or <emphasis>LOCAL</emphasis> (which matches any string that does not
- contain a "." character). If supported by the system you can use
+ or <emphasis>LOCAL</emphasis>. <emphasis>LOCAL</emphasis>
+ keyword matches if and only if the <emphasis>PAM_RHOST</emphasis> is
+ not set and &lt;origin&gt; field is thus set from
+ <emphasis>PAM_TTY</emphasis> or <emphasis>PAM_SERVICE</emphasis>".
+ If supported by the system you can use
<emphasis>@netgroupname</emphasis> in host or user patterns.