diff options
Diffstat (limited to 'modules/pam_tally/README')
-rw-r--r-- | modules/pam_tally/README | 18 |
1 files changed, 13 insertions, 5 deletions
diff --git a/modules/pam_tally/README b/modules/pam_tally/README index d3bf5354..4174712a 100644 --- a/modules/pam_tally/README +++ b/modules/pam_tally/README @@ -25,12 +25,12 @@ OPTIONS GLOBAL OPTIONS - This can be used for auth and account services. + This can be used for auth and account module types. onerr=[fail|succeed] If something weird happens (like unable to open the file), return with - PAM_SUCESS if onerr=succeed is given, else with the corresponding PAM + PAM_SUCCESS if onerr=succeed is given, else with the corresponding PAM error code. file=/path/to/counter @@ -41,6 +41,14 @@ GLOBAL OPTIONS Will log the user name into the system log if the user is not found. + silent + + Don't print informative messages. + + no_log_info + + Don't log informative messages via syslog(3). + AUTH OPTIONS Authentication phase first checks if user should be denied access and if @@ -66,7 +74,7 @@ AUTH OPTIONS magic_root If the module is invoked by a user with uid=0 the counter is not - incremented. The sys-admin should use this for user launched services, + incremented. The sysadmin should use this for user launched services, like su, otherwise this argument should be omitted. no_lock_time @@ -93,14 +101,14 @@ AUTH OPTIONS ACCOUNT OPTIONS Account phase resets attempts counter if the user is not magic root. This - phase can be used optionaly for services which don't call pam_setcred(3) + phase can be used optionally for services which don't call pam_setcred(3) correctly or if the reset should be done regardless of the failure of the account phase of other modules. magic_root If the module is invoked by a user with uid=0 the counter is not - incremented. The sys-admin should use this for user launched services, + incremented. The sysadmin should use this for user launched services, like su, otherwise this argument should be omitted. no_reset |