{ "content": [ { "type": "text", "text": "# pam-auth-update(8) (man)\n\n**Summary:** pam-auth-update - manage PAM configuration using packaged profiles\n\n**Synopsis:** pam-auth-update [--package [--remove profile [profile...]]] [--force]\n\n## Flags\n\n| Flag | Long | Arg | Description |\n|------|------|-----|-------------|\n| — | --package | — | Indicate that the caller is a package maintainer script; lowers the priority of deb‐ conf questions to `medium' so that |\n| — | --force | — | Overwrite the current PAM configuration, without prompting. This option must not be used by package maintainer scripts; |\n\n## See Also\n\n- PAM(7)\n- pam.d(5)\n- debconf(7)\n- PAM-AUTH-UPDATE(8)\n\n## Section Outline\n\n- **NAME** (2 lines)\n- **SYNOPSIS** (2 lines)\n- **DESCRIPTION** (18 lines)\n- **OPTIONS** (1 lines) — 2 subsections\n - --package (13 lines)\n - --force (3 lines)\n- **FILES** (6 lines)\n- **AUTHOR** (2 lines)\n- **COPYRIGHT** (2 lines)\n- **SEE ALSO** (5 lines)\n\n## Full Content\n\n### NAME\n\npam-auth-update - manage PAM configuration using packaged profiles\n\n### SYNOPSIS\n\npam-auth-update [--package [--remove profile [profile...]]] [--force]\n\n### DESCRIPTION\n\npam-auth-update is a utility that permits configuring the central authentication policy for\nthe system using pre-defined profiles as supplied by PAM module packages. Profiles shipped\nin the /usr/share/pam-configs/ directory specify the modules, with options, to enable; the\npreferred ordering with respect to other profiles; and whether a profile should be enabled by\ndefault. Packages providing PAM modules register their profiles at install time by calling\npam-auth-update --package. Selection of profiles is done using the standard debconf inter‐\nface. The profile selection question will be asked at `medium' priority when packages are\nadded or removed, so no user interaction is required by default. Users may invoke\npam-auth-update directly to change their authentication configuration.\n\nThe script makes every effort to respect local changes to /etc/pam.d/common-*. Local modifi‐\ncations to the list of module options will be preserved, and additions of modules within the\nmanaged portion of the stack will cause pam-auth-update to treat the config files as locally\nmodified and not make further changes to the config files unless given the --force option.\n\nIf the user specifies that pam-auth-update should override local configuration changes, the\nlocally-modified files will be saved in /etc/pam.d/ with a suffix of .pam-old.\n\n### OPTIONS\n\n#### --package\n\nIndicate that the caller is a package maintainer script; lowers the priority of deb‐\nconf questions to `medium' so that the user is not prompted by default.\n\n--enable profile [profile...]\nEnable the specified profiles in system configuration. This is used to enable profiles\nthat are not on by default.\n\n--remove profile [profile...]\nRemove the specified profiles from the system configuration. pam-auth-update --remove\nshould be used to remove profiles from the configuration before the modules they ref‐\nerence are removed from disk, to ensure that PAM is in a consistent and usable state\nat all times during package upgrades or removals.\n\n#### --force\n\nOverwrite the current PAM configuration, without prompting. This option must not be\nused by package maintainer scripts; it is intended for use by administrators only.\n\n### FILES\n\n/etc/pam.d/common-*\nGlobal configuration of PAM, affecting all installed services.\n\n/usr/share/pam-configs/\nPackage-supplied authentication profiles.\n\n### AUTHOR\n\nSteve Langasek \n\n### COPYRIGHT\n\nCopyright (C) 2008 Canonical Ltd.\n\n### SEE ALSO\n\nPAM(7), pam.d(5), debconf(7)\n\n\n\nDebian 08/23/2008 PAM-AUTH-UPDATE(8)\n\n" } ], "structuredContent": { "command": "pam-auth-update", "section": "8", "mode": "man", "summary": "pam-auth-update - manage PAM configuration using packaged profiles", "synopsis": "pam-auth-update [--package [--remove profile [profile...]]] [--force]", "tldr_summary": null, "tldr_examples": [], "tldr_source": null, "flags": [ { "flag": "", "long": "--package", "arg": null, "description": "Indicate that the caller is a package maintainer script; lowers the priority of deb‐ conf questions to `medium' so that the user is not prompted by default. --enable profile [profile...] Enable the specified profiles in system configuration. This is used to enable profiles that are not on by default. --remove profile [profile...] Remove the specified profiles from the system configuration. pam-auth-update --remove should be used to remove profiles from the configuration before the modules they ref‐ erence are removed from disk, to ensure that PAM is in a consistent and usable state at all times during package upgrades or removals." }, { "flag": "", "long": "--force", "arg": null, "description": "Overwrite the current PAM configuration, without prompting. This option must not be used by package maintainer scripts; it is intended for use by administrators only." } ], "examples": [], "see_also": [ { "name": "PAM", "section": "7", "url": "https://www.chedong.com/phpMan.php/man/PAM/7/json" }, { "name": "pam.d", "section": "5", "url": "https://www.chedong.com/phpMan.php/man/pam.d/5/json" }, { "name": "debconf", "section": "7", "url": "https://www.chedong.com/phpMan.php/man/debconf/7/json" }, { "name": "PAM-AUTH-UPDATE", "section": "8", "url": "https://www.chedong.com/phpMan.php/man/PAM-AUTH-UPDATE/8/json" } ], "section_outline": [ { "name": "NAME", "lines": 2, "subsections": [] }, { "name": "SYNOPSIS", "lines": 2, "subsections": [] }, { "name": "DESCRIPTION", "lines": 18, "subsections": [] }, { "name": "OPTIONS", "lines": 1, "subsections": [ { "name": "--package", "lines": 13, "long": "--package" }, { "name": "--force", "lines": 3, "long": "--force" } ] }, { "name": "FILES", "lines": 6, "subsections": [] }, { "name": "AUTHOR", "lines": 2, "subsections": [] }, { "name": "COPYRIGHT", "lines": 2, "subsections": [] }, { "name": "SEE ALSO", "lines": 5, "subsections": [] } ] } }