---
name: "pam_nologin"
section: "8"
platform: "freebsd"
package: "base"
version: "16.0-CURRENT-20261027-61c70dc16a79"
release: "FreeBSD 16.0-CURRENT (2026-10-27)"
platforms: ["linux", "freebsd", "macos"]
url: "https://new.carta.tech/pam_nologin"
---

# pam\_nologin(8)

NoLogin PAM module

## NAME

**pam\_nologin** – NoLogin PAM module

## SYNOPSIS

\[*service-name*\] *module-type* *control-flag* *pam\_nologin* \[*options*\]

## DESCRIPTION

The NoLogin service module for PAM, **pam\_nologin** provides functionality for only one PAM category: account management. In terms of the *module-type* parameter, this is the “account” feature.

### NoLogin Account Management Module

The NoLogin account management component, **pam\_sm\_acct\_mgmt**(), verifies whether logins are administratively disabled via [nologin(5)](/nologin/5.md). It returns success if the user's login class has an "ignorenologin" capability specified in [login.conf(5)](/login.conf/5.md) or the [nologin(5)](/nologin/5.md) file does not exist. If neither condition is met, then the contents of [nologin(5)](/nologin/5.md) are echoed before failure is returned. The location of [nologin(5)](/nologin/5.md) is specified by a "nologin" capability in [login.conf(5)](/login.conf/5.md), which defaults to */var/run/nologin*.

The following options may be passed to the module:

- **debug**

  [syslog(3)](/syslog/3.md) debugging information at LOG\_DEBUG level.

- **no\_warn**

  suppress warning messages to the user. These messages include reasons why the user's login attempt was declined.

## SEE ALSO

[pam(3)](/pam/3.md), [syslog(3)](/syslog/3.md), [login.conf(5)](/login.conf/5.md), [nologin(5)](/nologin/5.md), [pam.conf(5)](/pam.conf/5.md)