PAM_USERTYPE(8)

  .SH "NAME" pam_usertype - check if the authenticated user is a system or regular account
  .SH "SYNOPSIS"
    .HP u
      pam_usertype.so
       [flag...]
       {condition}

  .SH "DESCRIPTION"

    .PP pam_usertype.so is designed to succeed or fail authentication based on type of the account of the authenticated user. The type of the account is decided with help of SYS_UID_MAX settings in /etc/login.defs. One use is to select whether to load other modules based on this test.
    .PP The module should be given only one condition as module argument. Authentication will succeed only if the condition is met.

  .SH "OPTIONS"

    .PP The following flags are supported:

      .PP use_uid

              Evaluate conditions using the account of the user whose UID the application is running under instead of the user being authenticated.

          .RE
          .PP audit

                  Log unknown users to the system log.

              .RE

            .PP Available conditions are:

              .PP issystem

                      Succeed if the user is a system user.

                  .RE
                  .PP isregular

                          Succeed if the user is a regular user.

                      .RE

                  .SH "MODULE TYPES PROVIDED"

                    .PP All module types (account, auth, password and session) are provided.

                  .SH "RETURN VALUES"

                        .PP PAM_SUCCESS

                                The condition was true.

                            .RE
                            .PP PAM_BUF_ERR

                                    Memory buffer error.

                                .RE
                                .PP PAM_CONV_ERR

                                        The conversation method supplied by the application failed to obtain the username.

                                    .RE
                                    .PP PAM_INCOMPLETE

                                            The conversation method supplied by the application returned PAM_CONV_AGAIN.

                                        .RE
                                        .PP PAM_AUTH_ERR

                                                The condition was false.

                                            .RE
                                            .PP PAM_SERVICE_ERR

                                                    A service error occurred or the arguments can't be parsed correctly.

                                                .RE
                                                .PP PAM_USER_UNKNOWN

                                                        User was not found.

                                                    .RE

                                              .SH "EXAMPLES"

                                                .PP Skip remaining modules if the user is a system user:

                                                account sufficient pam_usertype.so issystem

                                              .SH "SEE ALSO"

                                                .PP login.defs(5), pam(8)

                                              .SH "AUTHOR"

                                                .PP Pavel Březina <pbrezina@redhat.com>