Projects / pam_script

pam_script

pam_script is a PAM that executes a script at the start and end of a session. Any PAM-aware application can use the module to perform arbitrary operations. It was originally written for cleaning up when a user logs out.

Tags Security
Licenses GPL
Implementation C

Tweet this project Short link

Rss Recent releases

  • Rrelease-mid
  •  03 Jul 2008 22:09
  • Rrelease-after

Changes: A bug in the dropping of privileges was fixed. The option parsing code was rewritten and an initgroups option was added.

  • Rrelease-mid
  •  31 Jul 2007 14:39
  • Rrelease-after

Changes: Improved Makefile and Debian packaging scripts. Options to set the home directory and PAM_USER token in the environment.

  • Rrelease-mid
  •  19 Oct 2006 16:55
  • Rrelease-after

Changes: This release fixes a bug that prevented building with PAM 0.99. There are minor documentation updates.

  • Rrelease-mid
  •  18 Oct 2006 07:17
  • Rrelease-after

Changes: pam-script can now expose PAM_RHOST to the script.

  • Rrelease-mid
  •  03 Aug 2006 00:44
  • Rrelease-after

Changes: Small changes were made to comply with Debian policy.

Rss Recent comments

Rcomment-before 13 Feb 2003 23:12 Rcomment-trans iburger Rcomment-after

Re: I hacked mine to run both login and logout scripts...

> I hacked my pam_script module to have
> both a login and a logout script,

I've been thinking of doing this for a while, but it is very simple to implement and so far I have no need for that, as /etc/X11/Xsession is usually sufficient. But it might be useful for other uses, such as on pam aware ftp servers.

Anyway, if you want to send me a patch I'll incorporate it into the main source in some way, or at least include the patch in the tarball.

Rcomment-before 13 Feb 2003 08:22 Rcomment-trans SodaBrew Rcomment-after

I hacked mine to run both login and logout scripts...
I hacked my pam_script module to have both a login and a logout script, /etc/security/pam_script/log... respectively. Works wonders for doing screwy things when a user logs in! For example, I use a PHP script that hooks up to my LDAP server to find out where the user's home directory is located and Samba mounts it, doing smart permissions checking along the way. pam_mount wasn't flexible enough, and I have a web based file manager in PHP which does the same thing, so the code was nearly the same!

Send an "email" to my freshmeat box if you're interested!

F0dfe5f9d3fc7162b41219e4398b726b_thumb

Project Spotlight

KMidimon

An ALSA sequencer MIDI monitor.

78698f74b1474080b49b4abbf7c7312c_thumb

Project Spotlight

Chestnut FTP Search

A Web application to search files on FTP servers.