auth only on group dependency ?

[Tomas Mraz]

On Mon, 2006-01-30 at 19:55 -0700, Michael Gale wrote:
> Hello,
> 
> 	I would like to know if it is possible to have a module run only if a 
> user is part of a group ?

You can use pam_succeed_if with jump action.

It can be done like this:

auth [success=2 default=ignore] pam_succeed_if.so user ingroup authtoken
auth sufficient pam_unix.so
auth required pam_deny.so
auth sufficient pam_token.so
auth required pam_deny.so

> We want some people to be able to login with a user name and password 
> and others to required token based authentication.

-- 
Tomas Mraz <tmraz at redhat.com>