---
name: "pam_sacl"
section: "8"
platform: "macos"
package: "pam_modules"
version: "217.100.6"
release: "macOS 26.5"
platforms: ["macos"]
url: "https://new.carta.tech/pam_sacl"
---

# pam\_sacl(8)

Service Access Control List PAM module

## NAME

**pam\_sacl** – Service Access Control List PAM module

## SYNOPSIS

\[*service-name*\] *function-class* *control-flag* pam\_sacl \[*options*\]

## DESCRIPTION

The Service Access Control List PAM module supports the account management function class.  In terms of the *function-class* parameter, this is the “account” class.

The Service Access Control List account management module verifies that the authenticated user is permitted access by checking the username against the the SACL of the service named by the **sacl\_service** option.

The following option must be passed to this account module:

- **sacl\_service=SERVICE**

  This option names the SACL that the username should be checked against.  SERVICE should be the literal name of the service (e.g. “sacl\_service=smb”).

The following options may be passed to the account module:

- **allow\_trustacct**

  Always allow access to computer trust accounts.

- **debug**

  Debug information will be printed to the system log.

## SEE ALSO

[pam.conf(5)](/pam.conf/5.md), [pam(8)](/pam/8.md)