This module manages bits around PAM.

This module has been tested to work on the following systems.

• EL 5
• EL 6

Array of users allowed to log in.

• Default: root

Array of packages providing the pam functionality. If undef, parameter is set based on the OS version.

• Default: undef, default is set based on OS version

Allow array of extra lines at the bottom of pam.d/login for oracle systems on EL5.

• Default: UNSET

PAM login path

• Default: '/etc/pam.d/login'

Owner of $pam_d_login_path

• Default: 'root'

Group of $pam_d_login_path

• Default: 'root'

Mode of $pam_d_login_path

• Default: '0644'

Content template of $pam_d_login_path. If undef, parameter is set based on the OS version.

• Default: undef, default is set based on OS version

PAM sshd path

• Default: '/etc/pam.d/sshd'

Owner of $pam_d_sshd_path

• Default: 'root'

Group of $pam_d_sshd_path

• Default: 'root'

Mode of $pam_d_sshd_path

• Default: '0644'

Content template of $pam_d_sshd_path. If undef, parameter is set based on the OS version.

• Default: undef, default is set based on OS version

Content template of sytem-auth.

• Default: '/etc/pam.d/system-auth'

Content template of sytem-auth-ac.

• Default: '/etc/pam.d/system-auth-ac'

$system_auth_ac_auth_lines = undef, $system_auth_ac_account_lines = undef, $system_auth_ac_password_lines = undef, $system_auth_ac_session_lines = undef,