Resource Type: pam

Defined in:

lib/puppet/type/pam.rb

Providers:

augeas

Overview

Manages settings in an PAM service files.

The resource name is a descriptive string only due to the non-uniqueness of any single paramter.

Properties

• arguments

  Arguments to assign for the module.

• control

  Simple or complex definition of the module’s behavior on failure.

• ensure (defaults to: present)

  The basic property that the resource should be in.

  Supported values:

  • present
  • absent
  • positioned
• optional

  Whether failure to load the module will break things

  Supported values:

  • true
  • false

Parameters

• control_is_param (defaults to: false)

  Whether ‘control` should be considered a parameter or a property.

  Supported values:

  • false
  • true
• module

  The name of the specific PAM module to load.

• name (namevar)

  The name of the resource, has no bearing on anything

• position (defaults to: before last)

  A three part text field that providers the placement position of an entry.

  The field consists of ‘placement identifier value`

  Placement can be either ‘before` or `after` Identifier can be either `first`, `last`, `module`, or an Augeas xpath Value is matched as follows:

  With `first` and `last` match `value` to the `control` field, can be blank for absolute positioning.
  With `module` matches the `module` field of the associated line, can not be blank.
  With an Augeas xpath this field will be ignored, and should be blank.
  

• provider

  The specific backend to use for this ‘pam` resource. You will seldom need to specify this — Puppet will usually discover the appropriate provider for your platform.

• service

  The PAM service this entry will be placed in. Typically this is the same as the filename under /etc/pam.d

• target

  The file in which to store the settings, defaults to ‘/etc/pam.d/service`.

• type

  The PAM service type of the setting: account, auth, password, session.

  Supported values:

  • account
  • auth
  • password
  • session