asis">root, the user will not forward cookies to other users.

Both the import and export files support wildcards (such as *). Both the import and export files can be empty, signifying that no users are allowed.

### 6.43.2. OPTIONS

debug

  Print debug information.

xauthpath=/path/to/xauth

  Specify the path the xauth program (it is expected in `/usr/X11R6/bin/xauth`, `/usr/bin/xauth`, or `/usr/bin/X11/xauth` by default).

systemuser=UID

  Specify the highest UID which will be assumed to belong to a "system" user. pam_xauth will refuse to forward credentials to users with UID less than or equal to this number, except for root and the "targetuser", if specified.

targetuser=UID

  Specify a single target UID which is exempt from the systemuser check.

### 6.43.3. MODULE TYPES PROVIDED

Only the session type is provided.

### 6.43.4. RETURN VALUES

PAM_BUF_ERR

  Memory buffer error.

PAM_PERM_DENIED

  Permission denied by import/export file.

PAM_SESSION_ERR

  Cannot determine user name, UID or access users home directory.

PAM_SUCCESS

  Success.

PAM_USER_UNKNOWN

  User not known.

### 6.43.5. EXAMPLES

Add the following line to `/etc/pam.d/su` to forward xauth keys between users when calling su:

    session  optional  pam_xauth.so

### 6.43.6. AUTHOR

pam_xauth was written by Nalin Dahyabhai <nalin@redhat.com>, based on original version by Michael K. Johnson <johnsonm@redhat.com>.

Prev | Up | Next
6.42. pam_wheel - only permit root access to members of group wheel | Home | Chapter 7. See also