PAM Configuration File Syntax (System Administration Guide: Security Services)

System Administration Guide: Security Services

PAM Configuration File Syntax

The PAM configuration file consists of entries with the following syntax:

service_name module_type control_flag module_path module_options

`service_name`	Is the name of the service, for example, `ftp`, `login`, `telnet`.
`module_type`	Is the module type for the service. For more information, see PAM Module Types.
`control_flag`	Determines the continuation or failure behavior for the module.
`module_path`	Specifies the path to the library object that implements the service.
`module_options`	Specifies the options that are passed to the service modules.

You can add comments to the pam.conf file by starting the line with a # (pound sign). Use white spaces or tabs to delimit the fields.

Note –

An entry in the PAM configuration file is ignored if one of the following conditions exists: the line has less than four fields, an invalid value is given for module_type or control_flag, or the named module does not exist.