NAME

       pam_session_timelimit - Module to impose daily time limits on user sessions

SYNOPSIS

       pam_session_timelimit.so [...]

DESCRIPTION

       The pam_session_timelimit PAM module interfaces with systemd to limit the length of time that a user can
       use a service. This is a per-day time limit; each successive session counts against the limit and reduces
       the time available on a given day for remaining sessions.

       The time used by a session is only recorded at the session end. It is therefore possible to exceed the
       absolute limit by launching sessions in parallel.

       By default the settings for per-user session time limits are taken from the config file
       /etc/security/time_limits.conf. An alternate file can be specified with the path option.

       Time limits in this config file are expressed using the syntax described in systemd.time(7).

       The config file format does not support configuring different time limits for different services. To
       achieve this, use different path options for each service.

OPTIONS

       path=/path/to/time_limits.conf
           Indicate an alternative configuration file following the time_limits.conf format to override the
           default.

       statepath=/path/to/session_state
           Indicate an alternative state file where the module should record each user's used session time for
           the day.

MODULE TYPES PROVIDED

       The account and session module types are provided.

RETURN VALUES

       PAM_SUCCESS
           Access was granted.

       PAM_PERM_DENIED
           The user is not allowed access at this time.

       PAM_BUF_ERR
           Memory buffer error.

       PAM_SYSTEM_ERR
           An unexpected error was encountered.

       PAM_SESSION_ERR
           The session was not opened correctly and therefore cannot be closed correctly.

       PAM_BAD_ITEM
           The module could not identify the user to be given access.

       PAM_IGNORE
           No session limit has been configured for this user.

FILES

       /etc/security/time_limits.conf
           Default configuration file

       /var/lib/session_times
           Default state file

EXAMPLES

           #%PAM-1.0
           #
           # apply pam_session_timelimit accounting to login requests
           #
           login  account  required  pam_session_timelimit.so
           login  session  required  pam_session_timelimit.so

SEE ALSO

       systemd.time(7), pam.d(5), pam(7).

AUTHOR

       pam_session_timelimit was written by Steve Langasek <vorlon@dodds.net>.

System Manager's Manual                            01/29/2024                            PAM_SESSION_TIMELIMI(8)