PAM -debug info

[Alex Glennie]

Can more than one argument be passed via pam.conf ie
login auth required /usr/lib/security/libpam_unix.1 try_first_pass debug

can find no information if this is acceptable, and SAM complains if multiple options are passed, so not sure if this is correct or SAM is broken

[James A. Donovan · Accepted solution]

If I'm reading the man page for pam_sm_open_session correctly, it seems that you should be able to pass multiple options.

From the man page:
"The argc argument represents the number of module options passed in from the configuration file pam.conf(4). argv specifies the module options, which are interpreted and processed by the session management service. If an unknown option is passed in, an error should be logged through syslog(3) and the option ignored."

SAM on the other hand, is probably trying to parse the pam.conf, and may not know how to handle more than one option in the option field.