pam.conf
Legacy PAM configuration file format where all services are configured in a single file
TLDR
Basic authentication entry
$ login auth required pam_unix.so
Account management entrycopy
$ login account required pam_unix.so
Session entrycopy
$ login session required pam_limits.so
Password entrycopy
$ login password required pam_unix.so
copy
SYNOPSIS
/etc/pam.conf
DESCRIPTION
pam.conf is the legacy PAM configuration file format where all services are configured in a single file. Modern systems typically use the /etc/pam.d/ directory with per-service files instead.Each line defines a rule with the format: service type control module-path [arguments].
PARAMETERS
service
Application name.type
auth, account, password, session.control
required, requisite, sufficient, optional.module
PAM module path.arguments
Module arguments.
EXAMPLE
$ # /etc/pam.conf
login auth required pam_securetty.so
login auth required pam_unix.so
login account required pam_unix.so
login session required pam_limits.so
login password required pam_unix.so
other auth required pam_deny.so
other account required pam_deny.so
login auth required pam_securetty.so
login auth required pam_unix.so
login account required pam_unix.so
login session required pam_limits.so
login password required pam_unix.so
other auth required pam_deny.so
other account required pam_deny.so
copy
CONTROL FLAGS
$ required - Must succeed, continue checking
requisite - Must succeed, fail immediately if not
sufficient - Success ends checking, failure continues
optional - Result ignored unless only module
requisite - Must succeed, fail immediately if not
sufficient - Success ends checking, failure continues
optional - Result ignored unless only module
copy
CAVEATS
/etc/pam.d/ preferred on modern systems. Syntax errors can lock you out. Test with another root session.