retry=N

  Prompt user at most `N` times before returning with error. The default is 1.

authtok_type=STRING

  See pam_get_authtok(3) for more details.

file=/path/filename

  Store password history in file `/path/filename` rather than the default location. The default location is `/etc/security/opasswd`.

conf=/path/to/config-file

  Use another configuration file instead of the default `/etc/security/pwhistory.conf`.

The options for configuring the module behavior are described in the pwhistory.conf(5) manual page. The options specified on the module command line override the values from the configuration file.

### 6.26.3. MODULE TYPES PROVIDED

Only the `password` module type is provided.

### 6.26.4. RETURN VALUES

PAM_AUTHTOK_ERR

  No new password was entered, the user aborted password change or new password couldn't be set.

PAM_IGNORE

  Password history was disabled.

PAM_MAXTRIES

  Password was rejected too often.

PAM_USER_UNKNOWN

  User is not known to system.

### 6.26.5. FILES

/etc/security/opasswd

  Default file with password history

`/etc/security/pwhistory.conf`

  Config file for pam_pwhistory options

`%vendordir%/security/pwhistory.conf`

  Config file for pam_pwhistory options. It will be used if `/etc/security/pwhistory.conf` does not exist.

### 6.26.6. EXAMPLES

An example password section would be:

    #%PAM-1.0
    password     required       pam_pwhistory.so
    password     required       pam_unix.so        use_authtok

In combination with pam_passwdqc:

    #%PAM-1.0
    password     required       pam_passwdqc.so    config=/etc/passwdqc.conf
    password     required       pam_pwhistory.so   use_authtok
    password     required       pam_unix.so        use_authtok

### 6.26.7. AUTHOR

pam_pwhistory was written by Thorsten Kukuk <kukuk@thkukuk.de>

Prev | Up | Next
6.25. pam_permit - the promiscuous module | Home | 6.27. pam_rhosts - grant access using .rhosts file