auth only on group dependency ?

Michael Gale michael.gale at bluesuperman.com
Wed Feb 1 08:14:07 UTC 2006


Thanks,

That did what I wanted :)

Michael


Tomas Mraz wrote:
> On Mon, 2006-01-30 at 19:55 -0700, Michael Gale wrote:
> 
>>Hello,
>>
>>	I would like to know if it is possible to have a module run only if a 
>>user is part of a group ?
> 
> 
> You can use pam_succeed_if with jump action.
> 
> It can be done like this:
> 
> auth [success=2 default=ignore] pam_succeed_if.so user ingroup authtoken
> auth sufficient pam_unix.so
> auth required pam_deny.so
> auth sufficient pam_token.so
> auth required pam_deny.so
> 
> 
>>We want some people to be able to login with a user name and password 
>>and others to required token based authentication.
> 
> 




More information about the Pam-list mailing list