PAM_PWEXPORT(8)

NAME
pam_pwexport - challenge-response authentication

SYNOPSIS
auth requisite pam_unix.so
auth required pam_pwexport.so /some/exe/somewhere
password requisite pam_unix.so
password required pam_pwexport.so /some/exe/somewhere

DESCRIPTION
pam_pwexport.so is designed to snoop on passwords and report to an outside program. This is useful any time you are migrating your user database from one auth scheme to another -- as users log in and change passwords, you harvest these passwords and put them in your new format. It works by collecting your username and password and (if you supply it) your old password, and sending those to the stdin of an arbitrary program (or script), like so:
  user foo
  oldpassword bar
  password baz where the `oldpassword' line may be missing.

ARGUMENTS

/some/exe/somewhere
    Program or script to pass retrieved user and password to.

NOTES
It doesn't actually prompt for usernames and passwords, nor does it verify anything, so you MUST chain it onto an existing module such as pam_unix. That's what the `requisite' keyword does. If your migration scheme requires the "old password" in order to work, you may as well skip the "auth" lines, since (for obvious reasons) they will never return that info. Never use this module.

BUGS
Let's hope not.

AUTHOR
Peter Samuelson <peter@cadcamlab.org>