Relevant BUGIDs: 117240

Purpose of commit: documentation

Commit summary:
---------------
Documentation for new accessconf= module argument
contributed by Meelis Roos.

diff --git a/CHANGELOG b/CHANGELOG
index 3be5741b540c03b698979beef082a630210303df..b59524c2cc5d6f89614802a77809bc485abf7400 100644 (file)
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -35,7 +35,8 @@ Where you should replace XXXXX with a bug-id.
 0.73: please submit patches for this section with actual code/doc
       patches!
 
-* added accessconf=<filename> feature to pam_access - request from Aldrin Martoq (Bug 111927 - agmorgan)
+* added accessconf=<filename> feature to pam_access - request from
+  Aldrin Martoq and Meelis Roos (Bugs 111927,117240 - agmorgan)
 * fix for pam_limit module not dealing with all limits Adam J. Richter
   (Bug 119554 - agmorgan)
 * comment fix describing fail_delay callback in _pam_types.h (Bug

diff --git a/doc/modules/pam_access.sgml b/doc/modules/pam_access.sgml
index e192d12e513f3a11ec3eb52531615dec3d046886..d6f317bd7b2b7b2a77b7be00934ccf46a1e1a797 100644 (file)
--- a/doc/modules/pam_access.sgml
+++ b/doc/modules/pam_access.sgml
@@ -34,8 +34,10 @@ account
 
 <tag><bf>Clean code base:</bf></tag>
 
-<tag><bf>System dependencies:</bf></tag>
-Requires a configuration file <tt>/etc/security/access.conf</tt>
+<tag><bf>System dependencies:</bf></tag> 
+Requires a configuration file. By default 
+<tt>/etc/security/access.conf</tt> is used but this can be overridden. 
+
 <tag><bf>Network aware:</bf></tag>
 
 Through <tt/PAM_TTY/ if set, otherwise attempts getting tty name of
@@ -57,6 +59,8 @@ Provides logdaemon style login access control.
 
 <tag><bf>Recognized arguments:</bf></tag>
 
+<tt>accessconf=<it>/path/to/file.conf</it></tt>
+
 <tag><bf>Description:</bf></tag>
 
 This module provides logdaemon style login access control based on
@@ -66,6 +70,18 @@ logins. Diagnostics are reported through <tt/syslog(3)/.  Wietse
 Venema's <tt/login_access.c/ from <em/logdaemon-5.6/ is used with
 several changes by A. Nogin.
 
+<p> 
+The behavior of this module can be modified with the following 
+arguments: 
+<itemize> 
+ 
+<item><tt>accessconf=/path/to/file.conf</tt> - 
+indicate an alternative <em/access/ configuration file to override 
+the default. This can be useful when different services need different 
+access lists. 
+ 
+</itemize> 
+
 <tag><bf>Examples/suggested usage:</bf></tag>
 
 Use of module is recommended, for example, on administrative machines
@@ -90,4 +106,3 @@ A sample <tt>access.conf</tt> configuration file is included with the
 distribution.
 
 </descrip>
-