The RootOK authentication service module for PAM provides functionality for only one PAM category: authentication. In terms of the module-type
parameter, this is the “
” feature. It also provides a null function for session management.
RootOK Authentication Module
The RootOK authentication component (pam_sm_authenticate
()), always returns success for the superuser; i.e., if getuid(2)
The following options may be passed to the authentication module:
syslog(3) debugging information at LOG_DEBUG level.
suppress warning messages to the user. These messages include reasons why the user's authentication attempt was declined.