Content-type: text/html Man page of pam_unix_account

pam_unix_account

Section: Standards, Environments, and Macros (5)
Updated: 17 Jul 2003
Index Return to Main Contents
 

NAME

pam_unix_account - PAM account management module for UNIX  

SYNOPSIS

pam_unix_account.so.1
 

DESCRIPTION

pam_unix_account module implements pam_sm_acct_mgmt(), which provides functionality to the PAM account management stack. The module provides functions to validate that the user's account is not locked or expired and that the user's password does not need to be changed. The module retrieves account information from the configured databases in nsswitch.conf(4).

The following options can be passed to the module:

debug syslog(3C) debugging information at the LOG_DEBUG level

nowarn Turn off warning messages

server_policy If the account authority for the user, as specified by PAM_USER, is a server, do not apply the Unix policy from the passwd entry in the name service switch.

 

ERRORS

The following values are returned:

PAM_UNIX_ACCOUNT User account has expired

PAM_AUTHTOK_EXPIRED Password expired and no longer usable

PAM_BUF_ERR Memory buffer error

PAM_IGNORE Ignore module, not participating in result

PAM_NEW_AUTHTOK_REQD Obtain new authentication token from the user

PAM_PERM_DENIED The account is locked or has been inactive for too long

PAM_SERVICE_ERR Error in underlying service module

PAM_SUCCESS The account is valid for use at this time

PAM_USER_UNKNOWN No account is present for the user

 

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPEATTRIBUTE VALUE
Interface StabilityEvolving
MT LevelMT-Safe with exceptions

 

SEE ALSO

pam(3PAM), pam_authenticate(3PAM), syslog(3C), libpam(3LIB), pam.conf(4), nsswitch.conf(4), attributes(5), pam_authtok_check(5), pam_authtok_get(5), pam_authtok_store(5), pam_dhkeys(5), pam_passwd_auth(5), pam_unix_auth(5), pam_unix_session(5)  

NOTES

The interfaces in libpam(3LIB) are MT-Safe only if each thread within the multi-threaded application uses its own PAM handle.

The pam_unix(5) module is no longer supported. Similar functionality is provided by pam_authtok_check(5), pam_authtok_get(5), pam_authtok_store(5), pam_dhkeys(5), pam_passwd_auth(5), pam_unix_account(5), pam_unix_auth(5), and pam_unix_session(5).


 

Index

NAME
SYNOPSIS
DESCRIPTION
ERRORS
ATTRIBUTES
SEE ALSO
NOTES

This document was created by man2html, using the manual pages.
Time: 02:39:49 GMT, October 02, 2010