Summary: pam_if is a PAM "meta-module" allowing you to execute other modules conditionally. Usage: pam_if.so options... -- module argument... Options: user=N username matches shell pattern N tty=N terminal matches s.p. N rhost=N rhost matches s.p. N debug explain mismatches Example: Let's say you want to allow pam_pwdb authentication for console logins only and require pam_very_secure_module for everything else. Here is the appropriate /etc/pam.d/login: auth required pam_nologin.so auth sufficient pam_if.so tty=/dev/tty[0-9]* -- \ pam_pwdb.so shadow nullok auth required pam_very_secure_module.so account required pam_pwdb.so session required pam_pwdb.so Author: Pavel Kankovsky Aug 22, 2001 Credits: Elliot Lee for pam_listfile Marc Ewing and Andrew G. Morgan for pam_handlers Changes: * Aug 22, 2001 - debug messages for user= and rhost= fixed (fix by Niccolo Rigacci)...oh yes, copy and paste programming considered harmful * Oct 9, 2000 - rhost option bug fixed (reported by Kenneth R. Mort) - missing check of malloc() return value added - memory freed properly in relay() - miscellaneous typos fixed * Jan 7, 1999 - 1st version released