Lsass PAM

Setting Name Description
DisplayMotd

Display message of the day.

Default Value: false

PAMLogLevel

Configure PAM lsass logging detail level.

Default Value: error

UserNotAllowedError

Message displayed at console logon failed attempt.

Default Value: Access denied

NssApplyAccessControl

Filter users returned by NSS based on RequireMembershipOf.

Default Value: false