PAM.CONF(5) Linux-PAM PAM.CONF(5) (NAME) pam.conf, pam.d - (PAM) (DESCRIPTION) PAM PAM ( PAM-API) . () : /etc/pam.conf. pam.d . Linux-PAM /etc/pam.conf (ignore). PAM PAM-API PAM . (Syntax) /etc/pam.conf . (Escaped) `\' . `#' . (Tokens) (Case-insensitive): service type control module-path module-arguments /etc/pam.d/ service. service /etc/pam.d/ . . PAM (stacked) PAM . service : login su . other (default) . ( other) . type . . : account . / ( ) -- 'root' -- . auth . . . password . 'challenge/response' (auth) . session . / (Mount) . type - PAM . . control PAM-API . : value=action . () control : required PAM PAM-API (stacked) service type . requisite required PAM . required requisite . . . . sufficient required PAM PAM . sufficient PAM . optional service+type . include . substack . include done die (Substack) . . reset . control : [value1=action1 value2=action2 ...] valueN . : success open_err symbol_err service_err system_err buf_err perm_denied auth_err cred_insufficient authinfo_unavail user_unknown maxtries new_authtok_reqd acct_expired session_err cred_unavail cred_expired cred_err no_module_data conv_err authtok_err authtok_recover_err authtok_lock_busy authtok_disable_aging try_again ignore abort authtok_expired module_unknown bad_item conv_again incomplete default. default << valueN >> . PAM /usr/include/security/_pam_types.h . actionN : ignore . bad . . . die bad PAM . ok PAM . PAM_SUCCESS (Override) . 'ok' . done ok PAM . N ( ) N . N 0 ignore . PAM : pam_authenticate pam_acct_mgmt pam_chauthtok pam_open_session ignore pam_setcred pam_close_session ignore ok bad . reset . valueN default bad . : required requisite sufficient optional [...] : required [success=ok new_authtok_reqd=ok ignore=ignore default=bad] requisite [success=ok new_authtok_reqd=ok ignore=ignore default=die] sufficient [success=done new_authtok_reqd=done default=ignore] optional [success=ok new_authtok_reqd=ok default=ignore] module-path PAM ( '/' ) : /lib/security/ /lib64/security/ . module-arguments PAM . . . squid auth required pam_mysql.so user=passwd_query passwd=mada \ db=eminence [query=select user_name from internet_service \ where user_name='%u' and password=PASSWORD('%p') and \ service='web_proxy'] `[' `]' `\]' . : [..[..\]..] --> ..[..].. ( ) () ( ) . syslog(3) . libpam pam.d . ( ) : . PAM (Vendor) /etc/pam.d/ /usr/lib/pam.d/ . . /etc/pam.d/ (Override) . pam.d /etc/pam.conf : type control module-path module-arguments (service-name) . . /etc/pam.d/login login . (FILES) /etc/pam.conf /etc/pam.d Linux-PAM. /etc/pam.conf . /usr/lib/pam.d Linux-PAM. /etc/pam.d (Override) . (SEE ALSO) pam(3), PAM(8), pam_start(3) Linux-PAM 06/29/2025 PAM.CONF(5)