dd>

Field has a value numerically less than or equal to number.

field eq number

  Field has a value numerically equal to number.

field >= number

  Field has a value numerically greater than or equal to number.

field > number

  Field has a value numerically greater than number.

field ne number

  Field has a value numerically different from number.

field = string

  Field exactly matches the given string.

field != string

  Field does not match the given string.

field =~ glob

  Field matches the given glob.

field !~ glob

  Field does not match the given glob.

field in item:item:...

  Field is contained in the list of items separated by colons.

field notin item:item:...

  Field is not contained in the list of items separated by colons.

user ingroup group[:group:....]

  User is in given group(s).

user notingroup group[:group:....]

  User is not in given group(s).

user innetgr netgroup

  (user,host) is in given netgroup.

user notinnetgr group

  (user,host) is not in given netgroup.

### 6.34.3. MODULE TYPES PROVIDED

All module types (`account`, `auth`, `password` and `session`) are provided.

### 6.34.4. RETURN VALUES

PAM_SUCCESS

  The condition was true.

PAM_AUTH_ERR

  The condition was false.

PAM_SERVICE_ERR

  A service error occurred or the arguments can't be parsed correctly.

### 6.34.5. EXAMPLES

To emulate the behaviour of pam_wheel, except there is no fallback to group 0 being only approximated by checking also the root group membership:

    auth required pam_succeed_if.so quiet user ingroup wheel:root

Given that the type matches, only loads the othermodule rule if the UID is over 500. Adjust the number after default to skip several rules.

    type [default=1 success=ignore] pam_succeed_if.so quiet uid > 500
    type required othermodule.so arguments...

### 6.34.6. AUTHOR

Nalin Dahyabhai <nalin@redhat.com>

Prev | Up | Next
6.33. pam_shells - check for valid login shell | Home | 6.35. pam_time - time controlled access