>>> Didn't think of that one, hence the login_is_local stuff above. >>> Of course I don't know if testing if the login_is_local is possible. >>> Refer to my first two statements in this email. >> You can indeed test if the login is local, but to test that, there's got >> to be a method or a criteria for determining "local" vs. not. Perhaps >> you're looking for something that sets the password the first time >> someone logs in? > For my purposes, local=someone typing on the physically attached > keybaord and getting feedback through the physically attached display. Pam_access can restrict users to local logins only. -- Mike :wq _______________________________________________ Pam-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/pam-list