| 1 | .\"- |
|---|
| 2 | .\" Copyright (c) 2002 Networks Associates Technology, Inc. |
|---|
| 3 | .\" All rights reserved. |
|---|
| 4 | .\" |
|---|
| 5 | .\" This software was developed for the FreeBSD Project by ThinkSec AS and |
|---|
| 6 | .\" NAI Labs, the Security Research Division of Network Associates, Inc. |
|---|
| 7 | .\" under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the |
|---|
| 8 | .\" DARPA CHATS research program. |
|---|
| 9 | .\" |
|---|
| 10 | .\" Redistribution and use in source and binary forms, with or without |
|---|
| 11 | .\" modification, are permitted provided that the following conditions |
|---|
| 12 | .\" are met: |
|---|
| 13 | .\" 1. Redistributions of source code must retain the above copyright |
|---|
| 14 | .\" notice, this list of conditions and the following disclaimer. |
|---|
| 15 | .\" 2. Redistributions in binary form must reproduce the above copyright |
|---|
| 16 | .\" notice, this list of conditions and the following disclaimer in the |
|---|
| 17 | .\" documentation and/or other materials provided with the distribution. |
|---|
| 18 | .\" 3. The name of the author may not be used to endorse or promote |
|---|
| 19 | .\" products derived from this software without specific prior written |
|---|
| 20 | .\" permission. |
|---|
| 21 | .\" |
|---|
| 22 | .\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND |
|---|
| 23 | .\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
|---|
| 24 | .\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
|---|
| 25 | .\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE |
|---|
| 26 | .\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL |
|---|
| 27 | .\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS |
|---|
| 28 | .\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
|---|
| 29 | .\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT |
|---|
| 30 | .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY |
|---|
| 31 | .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
|---|
| 32 | .\" SUCH DAMAGE. |
|---|
| 33 | .\" |
|---|
| 34 | .\" $P4: //depot/projects/openpam/doc/man/pam_acct_mgmt.3#11 $ |
|---|
| 35 | .\" |
|---|
| 36 | .Dd April 14, 2002 |
|---|
| 37 | .Dt PAM_ACCT_MGMT 3 |
|---|
| 38 | .Os |
|---|
| 39 | .Sh NAME |
|---|
| 40 | .Nm pam_acct_mgmt |
|---|
| 41 | .Nd perform PAM account validation procedures |
|---|
| 42 | .Sh LIBRARY |
|---|
| 43 | .Lb libpam |
|---|
| 44 | .Sh SYNOPSIS |
|---|
| 45 | .In security/pam_appl.h |
|---|
| 46 | .Ft int |
|---|
| 47 | .Fn pam_acct_mgmt "pam_handle_t *pamh" "int flags" |
|---|
| 48 | .Sh DESCRIPTION |
|---|
| 49 | The |
|---|
| 50 | .Nm |
|---|
| 51 | function verifies and enforces account restrictions |
|---|
| 52 | after the user has been authenticated. |
|---|
| 53 | .Pp |
|---|
| 54 | The |
|---|
| 55 | .Va flags |
|---|
| 56 | argument is the binary or of zero or more of the following |
|---|
| 57 | values: |
|---|
| 58 | .Bl -tag -width 18n |
|---|
| 59 | .It Dv PAM_SILENT |
|---|
| 60 | Do not emit any messages. |
|---|
| 61 | .It Dv PAM_DISALLOW_NULL_AUTHTOK |
|---|
| 62 | Fail if the user's authentication token is null. |
|---|
| 63 | .El |
|---|
| 64 | If any other bits are set, |
|---|
| 65 | .Xr pam_authenticate 3 |
|---|
| 66 | will return |
|---|
| 67 | .Dv PAM_SYMBOL_ERR . |
|---|
| 68 | .Sh RETURN VALUES |
|---|
| 69 | The |
|---|
| 70 | .Nm |
|---|
| 71 | function returns one of the following values: |
|---|
| 72 | .Bl -tag -width 18n |
|---|
| 73 | .It Bq Er PAM_ABORT |
|---|
| 74 | General failure. |
|---|
| 75 | .It Bq Er PAM_ACCT_EXPIRED |
|---|
| 76 | User accound has expired. |
|---|
| 77 | .It Bq Er PAM_AUTH_ERR |
|---|
| 78 | Authentication error. |
|---|
| 79 | .It Bq Er PAM_BUF_ERR |
|---|
| 80 | Memory buffer error. |
|---|
| 81 | .It Bq Er PAM_CONV_ERR |
|---|
| 82 | Conversation failure. |
|---|
| 83 | .It Bq Er PAM_NEW_AUTHTOK_REQD |
|---|
| 84 | New authentication token required. |
|---|
| 85 | .It Bq Er PAM_PERM_DENIED |
|---|
| 86 | Permission denied. |
|---|
| 87 | .It Bq Er PAM_SERVICE_ERR |
|---|
| 88 | Error in service module. |
|---|
| 89 | .It Bq Er PAM_SYSTEM_ERR |
|---|
| 90 | System error. |
|---|
| 91 | .It Bq Er PAM_USER_UNKNOWN |
|---|
| 92 | Unknown user. |
|---|
| 93 | .El |
|---|
| 94 | .Sh SEE ALSO |
|---|
| 95 | .Xr pam 3 , |
|---|
| 96 | .Xr pam_authenticate 3 , |
|---|
| 97 | .Xr pam_strerror 3 |
|---|
| 98 | .Sh STANDARDS |
|---|
| 99 | .Rs |
|---|
| 100 | .%T "X/Open Single Sign-On Service (XSSO) - Pluggable Authentication Modules" |
|---|
| 101 | .%D "June 1997" |
|---|
| 102 | .Re |
|---|
| 103 | .Sh AUTHORS |
|---|
| 104 | The |
|---|
| 105 | .Nm |
|---|
| 106 | function and this manual page were developed for the FreeBSD Project |
|---|
| 107 | by ThinkSec AS and NAI Labs, the Security Research Division of Network |
|---|
| 108 | Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 |
|---|
| 109 | .Pq Dq CBOSS , |
|---|
| 110 | as part of the DARPA CHATS research program. |
|---|
