PAM_LOCALUSER(8)

  .SH "NAME" pam_localuser - require users to be listed in /etc/passwd
  .SH "SYNOPSIS"
    .HP u
      pam_localuser.so
       [debug]
       [file=/path/passwd]

  .SH "DESCRIPTION"

    .PP pam_localuser is a PAM module to help implementing site-wide login policies, where they typically include a subset of the network's users and a few accounts that are local to a particular workstation. Using pam_localuser and pam_wheel or pam_listfile is an effective way to restrict access to either local users and/or a subset of the network's users.
    .PP This could also be implemented using pam_listfile.so and a very short awk script invoked by cron, but it's common enough to have been separated out.

  .SH "OPTIONS"

    .PP
        .PP debug

                Print debug information.

            .RE
            .PP file=/path/passwd

                    Use a file other than /etc/passwd.

            .RE

          .SH "MODULE TYPES PROVIDED"

            .PP All module types (account, auth, password and session) are provided.

          .SH "RETURN VALUES"

            .PP
                .PP PAM_SUCCESS

                        The new localuser was set successfully.

                    .RE
                    .PP PAM_BUF_ERR

                            Memory buffer error.

                        .RE
                        .PP PAM_CONV_ERR

                                The conversation method supplied by the application failed to obtain the username.

                            .RE
                            .PP PAM_INCOMPLETE

                                    The conversation method supplied by the application returned PAM_CONV_AGAIN.

                                .RE
                                .PP PAM_SERVICE_ERR

                                        The user name is not valid or the passwd file is unavailable.

                                    .RE
                                    .PP PAM_PERM_DENIED

                                            The user is not listed in the passwd file.

                                        .RE

                                  .SH "EXAMPLES"

                                    .PP Add the following lines to /etc/pam.d/su to allow only local users or group wheel to use su.

                                    account sufficient pam_localuser.so
                                    account required pam_wheel.so

                                  .SH "FILES"

                                      .PP /etc/passwd

                                              Local user account information.

                                          .RE

                                      .SH "SEE ALSO"

                                        .PP pam.conf(5), pam.d(5), pam(8)

                                      .SH "AUTHOR"

                                          .PP pam_localuser was written by Nalin Dahyabhai <nalin@redhat.com>.