NAME
pam_lastlog —
login accounting PAM
module
SYNOPSIS
[
service-name]
module-type control-flag
pam_lastlog
[
options]
DESCRIPTION
The login accounting service module for PAM provides functionality for only one
PAM category: session management. In terms of the
module-type parameter, this is the
“
session
” feature.
Login Accounting
Session Management Module
The login accounting session management component provides functions to initiate
(
pam_sm_open_session()) and terminate
(
pam_sm_close_session()) sessions. The
pam_sm_open_session() function records the session in the
utmp(5),
utmpx(5),
wtmp(5),
wtmpx(5),
lastlog(5), and
lastlogx(5) databases. The
pam_sm_close_session() function does nothing.
The following options may be passed to the authentication module:
-
-
- debug
- syslog(3)
debugging information at
LOG_DEBUG
level.
-
-
- no_nested
- Don't update records or print messages if the user is
“nested”, i.e. logged in on the same tty on top of another
user.
-
-
- no_warn
- suppress warning messages to the user.
-
-
- no_fail
- Ignore I/O failures.
SEE ALSO
last(1),
w(1),
login(3),
loginx(3),
logout(3),
logoutx(3),
pam.conf(5),
utmp(5),
utmpx(5),
lastlogin(8),
pam(8)
AUTHORS
The
pam_lastlog module and this manual page were developed for
the
FreeBSD Project by ThinkSec AS and NAI Labs, the
Security Research Division of Network Associates, Inc. under DARPA/SPAWAR
contract N66001-01-C-8035 (“CBOSS”), as part of the DARPA CHATS
research program.