Lsass PAM

Setting Name Description
DisplayMotd

Display message of the day.

Default value: false

PAMLogLevel

Configure PAM lsass logging detail level.

Default value: error

UserNotAllowedError

Message displayed at console logon failed attempt.

Default value: Access denied

NssApplyAccessControl

Filter users returned by NSS based on RequireMembershipOf.

Default value: false