---
name: "pam_aks"
section: "8"
platform: "macos"
package: "pam_modules"
version: "217.100.6"
release: "macOS 26.5"
platforms: ["macos"]
url: "https://new.carta.tech/pam_aks"
---

# pam\_aks(8)

OpenDirectory PAM module

## NAME

**pam\_opendirectory** – OpenDirectory PAM module

## SYNOPSIS

\[*service-name*\] *function-class* *control-flag* pam\_opendirectory \[*options*\]

## DESCRIPTION

The OpenDirectory PAM module supports the authentication, account management and password management function classes.  In terms of the *function-class* parameter, these are “auth”, “account” and “password” respectively.

### The OpenDirectory Authentication Module

The OpenDirectory authentication module permits or denies users based on OpenDirectory password authentication.

The following option may be passed to this authentication module:

- **nullok**

  Allow null passwords.

### The OpenDirectory Account Management Module

The OpenDirectory account management module permits or denies users based whether the account is enabled in OpenDirectory.

The following option may be passed to this account management module:

- **no\_check\_shell**

  Skip validating the user's shell.

- **no\_check\_home**

  Skip validating the user's home directory.

- **refresh**=*min*

  Sets the [mbr\_check\_membership(3)](/mbr_check_membership/3.md) cache timeout to *min* minutes.  When this option is used, the *min* value must be specified, and it must be an integer.

### The OpenDirectory Password Management Module

The OpenDirectory password management module supports password changing and enforces the OpenDirectory password policy.

## SEE ALSO

[mbr\_check\_membership(3)](/mbr_check_membership/3.md), [pam.conf(5)](/pam.conf/5.md), [pam(8)](/pam/8.md), pwpolicy(8), DirectoryService(8)