PAM_TIME(8)

โœจ PAM_TIME ๐Ÿ’…

okay bestie, so this is the Linux-PAM Manual page for pam_time โ€” the module that's literally the bouncer of time. no cap. ๐Ÿ•๐Ÿ‘‘


๐ŸŒธ NAME ๐ŸŒธ

pam_time โ€” the PAM module that does time control access. it's giving "you can come in, but only at the right hour, on the right day, from the right terminal." โฐ๐Ÿšช


๐Ÿฆ‹ SYNOPSIS ๐Ÿฆ‹

pam_time.so [conffile=conf-file] [debug] [noaudit]

short, sweet, three little options. slay. โœจ


๐Ÿ’– DESCRIPTION ๐Ÿ’–

so here's the tea, bestie: pam_time does NOT authenticate the user. it's not doing passwords, it's not doing vibes-checking of credentials. nope. instead, it restricts access to a system and/or specific applications at various times of the day, on specific days, or over various terminal lines. main character behaviour honestly. ๐ŸŒˆ

you can configure this module to deny access to (individual) users based on:

  • their name ๐Ÿชช
  • the time of day ๐Ÿ•ฐ๏ธ
  • the day of week ๐Ÿ“…
  • the service they're applying for ๐Ÿ’…
  • their terminal, like which one they're making their request from ๐Ÿ–ฅ๏ธ

by default, the rules for time/port access come from the config file /etc/security/time.conf. wanna use a different file? just pass the conffile option. easy. ๐ŸŽ€

and if Linux PAM is compiled with audit support, the module will report when it denies access. snitch behaviour, but make it security. ๐Ÿšจ


๐ŸŽ€ OPTIONS ๐ŸŽ€

  • conffile=/path/to/time.conf โ€” point at an alternative time.conf-style configuration file so it overrides the default one. your file, your rules, your era. ๐Ÿ‘‘
  • debug โ€” prints some debug information with syslog(3). for when you wanna see what's going on under the hood, nosy bestie energy. ๐Ÿ”
  • noaudit โ€” do NOT report logins at disallowed times to the audit subsystem. quiet mode activated. ๐Ÿคซ

๐Ÿ’œ MODULE TYPES PROVIDED ๐Ÿ’œ

only the account type is provided. that's it. one type. it knows its lane and it stays in it. periodt. ๐Ÿ’…


๐ŸŒŸ RETURN VALUES ๐ŸŒŸ

here's the vibe check results, bestie:

  • PAM_SUCCESS โ€” access was granted. come on in, queen. ๐ŸŽ‰
  • PAM_ABORT โ€” not all relevant data could be gotten. ๐Ÿ˜ญ it tried, it really did.
  • PAM_BUF_ERR โ€” memory buffer error. the RAM said "not today". ๐Ÿ’€
  • PAM_PERM_DENIED โ€” access was NOT granted. the door said no. ๐Ÿšซ
  • PAM_USER_UNKNOWN โ€” the user is not known to the system. who even are you? ๐Ÿ™ˆ

๐Ÿ“ FILES ๐Ÿ“

  • /etc/security/time.conf โ€” the default configuration file. the blueprint. the source material. โœจ

๐Ÿงš EXAMPLES ๐Ÿงš

okay so here's how you'd actually use it, and yes it's giving PAM config realness:

#%PAM-1.0
#
# apply pam_time accounting to login requests
#
login  account  required  pam_time.so

look at that. login requests, account type, required, and the star of the show: pam_time.so. ate. ๐Ÿ”ฅ


๐ŸŒˆ SEE ALSO ๐ŸŒˆ

time.conf(5), pam.d(5), pam(8). go read those too, they're the supporting cast and they understood the assignment. ๐Ÿ“š๐Ÿซถ


โญ AUTHOR โญ

pam_time was written by Andrew G. Morgan <morgan@kernel.org>. iconic. legend behaviour. we stan. ๐Ÿ‘‘


and that's the whole page, bestie!! ๐ŸŽ€ this one shipped under the Linux-PAM banner, dated 09/27/2026. go forth and schedule your access like the organized queen you are. mwah. ๐Ÿ’–๐Ÿฆ‹โœจ

๐Ÿ“ฆ where this page comes from