PAM_LOGIN_ACCESS(8) FreeBSD System Manager's Manual PAM_LOGIN_ACCESS(8)


pam_login_accesslogin.access PAM module


[ service-name] module-type control-flag pam_login_access [ options]


The login.access service module for PAM, pam_login_access provides functionality for only one PAM category: account management. In terms of the module-type parameter, this is the “ account” feature.

Login.access Account Management Module

The login.access account management component ( pam_sm_acct_mgmt()), returns success if and only the user is allowed to log in on the specified tty (in the case of a local login) or from the specified remote host (in the case of a remote login), according to the restrictions listed in login.access(5).


The login.access(5) access control scheme was designed and implemented by Wietse Venema.

The pam_login_access module and this manual page were developed for the FreeBSD Project by ThinkSec AS and NAI Labs, the Security Research Division of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (“CBOSS”), as part of the DARPA CHATS research program.

January 24, 2002 FreeBSD