FM / txts

/usr/share/doc/pam/txts

Name	Size	Mode	Actions
README.pam_access	5253	0644	edit dl rm
README.pam_chroot	1510	0644	edit dl rm
README.pam_console	1925	0644	edit dl rm
README.pam_cracklib	9757	0644	edit dl rm
README.pam_debug	1995	0644	edit dl rm
README.pam_deny	1035	0644	edit dl rm
README.pam_echo	1100	0644	edit dl rm
README.pam_env	3627	0644	edit dl rm
README.pam_exec	2230	0644	edit dl rm
README.pam_faildelay	827	0644	edit dl rm
README.pam_faillock	6062	0644	edit dl rm
README.pam_filter	3102	0644	edit dl rm
README.pam_ftp	1699	0644	edit dl rm
README.pam_group	2175	0644	edit dl rm
README.pam_issue	1356	0644	edit dl rm
README.pam_keyinit	2245	0644	edit dl rm
README.pam_lastlog	2597	0644	edit dl rm
README.pam_limits	2421	0644	edit dl rm
README.pam_listfile	3626	0644	edit dl rm
README.pam_localuser	1167	0644	edit dl rm
README.pam_loginuid	1117	0644	edit dl rm
README.pam_mail	2009	0644	edit dl rm
README.pam_mkhomedir	1361	0644	edit dl rm
README.pam_motd	2588	0644	edit dl rm
README.pam_namespace	11543	0644	edit dl rm
README.pam_nologin	1348	0644	edit dl rm
README.pam_permit	907	0644	edit dl rm
README.pam_postgresok	346	0644	edit dl rm
README.pam_pwhistory	2243	0644	edit dl rm
README.pam_rhosts	1882	0644	edit dl rm
README.pam_rootok	1086	0644	edit dl rm
README.pam_securetty	1342	0644	edit dl rm
README.pam_selinux	2909	0644	edit dl rm
README.pam_sepermit	1648	0644	edit dl rm
README.pam_shells	653	0644	edit dl rm
README.pam_stress	2060	0644	edit dl rm
README.pam_succeed_if	2864	0644	edit dl rm
README.pam_time	1301	0644	edit dl rm
README.pam_timestamp	1616	0644	edit dl rm
README.pam_tty_audit	2779	0644	edit dl rm
README.pam_umask	1631	0644	edit dl rm
README.pam_unix	7265	0644	edit dl rm
README.pam_userdb	2973	0644	edit dl rm
README.pam_usertype	1200	0644	edit dl rm
README.pam_warn	1224	0644	edit dl rm
README.pam_wheel	1968	0644	edit dl rm
README.pam_xauth	3695	0644	edit dl rm

Edit: /usr/share/doc/pam/txts/README.pam_lastlog (2597B)

pam_lastlog -- PAM module to display date of last login and perform inactive
account lock out

--------------------------------------------------------------------------

DESCRIPTION

pam_lastlog is a PAM module to display a line of information about the
   last login of the user. In addition, the module maintains the
   /var/log/lastlog file.

Some applications may perform this function themselves. In such cases,
   this module is not necessary.

If the module is called in the auth or account phase, the accounts that
   were not used recently enough will be disallowed to log in. The check is
   not performed for the root account so the root is never locked out.

OPTIONS

debug

Print debug information.

silent

Don't inform the user about any previous login, just update the
           /var/log/lastlog file. This option does not affect display of bad
           login attempts.

never

If the /var/log/lastlog file does not contain any old entries for
           the user, indicate that the user has never previously logged in
           with a welcome message.

nodate

Don't display the date of the last login.

noterm

Don't display the terminal name on which the last login was
           attempted.

nohost

Don't indicate from which host the last login was attempted.

nowtmp

Don't update the wtmp entry.

noupdate

Don't update any file.

showfailed

Display number of failed login attempts and the date of the last
           failed attempt from btmp. The date is not displayed when nodate is
           specified.

inactive=<days>

This option is specific for the auth or account phase. It
           specifies the number of days after the last login of the user when
           the user will be locked out by the module. The default value is
           90.

unlimited

If the fsize limit is set, this option can be used to override it,
           preventing failures on systems with large UID values that lead
           lastlog to become a huge sparse file.

EXAMPLES

Add the following line to /etc/pam.d/login to display the last login time
   of an user:

session  required  pam_lastlog.so nowtmp

To reject the user if he did not login during the previous 50 days the
   following line can be used:

auth  required  pam_lastlog.so inactive=50

AUTHOR

pam_lastlog was written by Andrew G. Morgan <morgan@kernel.org>.

Inactive account lock out added by Tomas Mraz <tm@t8m.info>.

cmd: