PAM_LASTLOG(8) | System Manager's Manual | PAM_LASTLOG(8)

# NAME

`pam_lastlog` — login accounting PAM module

# SYNOPSIS

[service-name] module-type control-flag pam_lastlog [options]

# DESCRIPTION

The login accounting service module for PAM provides functionality for only one PAM category: session management. In terms of the module-type parameter, this is the “`session`” feature.

## Login Accounting Session Management Module

The login accounting session management component provides functions to initiate (`pam_sm_open_session`()) and terminate (`pam_sm_close_session`()) sessions. The `pam_sm_open_session`() function records the session in the utmp(5), utmpx(5), wtmp(5), wtmpx(5), lastlog(5), and lastlogx(5) databases. The `pam_sm_close_session`() function does nothing.

The following options may be passed to the authentication module:

`debug`
  syslog(3) debugging information at `LOG_DEBUG` level.
`no_nested`
  Don't update records or print messages if the user is “nested”, i.e. logged in on the same tty on top of another user.
`no_warn`
  suppress warning messages to the user.
`no_fail`
  Ignore I/O failures.

# SEE ALSO

last(1), w(1), login(3), loginx(3), logout(3), logoutx(3), pam.conf(5), utmp(5), utmpx(5), lastlogin(8), pam(8)

# AUTHORS

The `pam_lastlog` module and this manual page were developed for the FreeBSD Project by ThinkSec AS and NAI Labs, the Security Research Division of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (“CBOSS”), as part of the DARPA CHATS research program.

March 2, 2005 | NetBSD 11.0