Man page - pam_set_items(8)

Packages contains this manual

Manual

PAM_SET_ITEMS

NAME
SYNOPSIS
DESCRIPTION
OPTIONS
MODULE TYPES PROVIDED
EXAMPLE

NAME

pam_set_items - A PAM test module to set module-specific PAM items

SYNOPSIS

pam_set_items.so

DESCRIPTION

PAM modules store data in PAM items . These items are only accessible from module context, not application context as they might include private data (PAM_AUTHTOK normally contains the password). But when testing PAM modules, it’s often nice to make sure a PAM module under test can retrieve data from the stack. The pam_set_items module makes this possible by reading environment variables and setting them as PAM items.

OPTIONS

None

MODULE TYPES PROVIDED

All module types ( account , auth , password and session ) are provided.

EXAMPLE

Consider an example that tests that pam_unix is able to read a provided password and doesn’t query on its own. The test service file would contain:

auth required pam_set_items.so
auth required pam_unix.so

Then the test would put the item to the test environment with:

setenv("PAM_AUTHTOK", "secret");

Then run the PAM conversation.