1pam_passwd_auth(5) Standards, Environments, and Macros pam_passwd_auth(5)
2
3
4
6 pam_passwd_auth - authentication module for password
7
9 pam_passwd_auth.so.1
10
11
13 pam_passwd_auth provides authentication functionality to the password
14 service as implemented by passwd(1). It differs from the standard PAM
15 authentication modules in its prompting behavior. It should be the
16 first module on the password service authentication stack.
17
18
19 The name of the user whose password attributes are to be updated must
20 be present in the PAM_USER item. This can be accomplished due to a pre‐
21 vious call to pam_start(3PAM), or explicitly set by pam_set_item(3PAM).
22 Based on the current user-id and the repository that is to by updated,
23 the module determines whether a password is necessary for a successful
24 update of the password repository, and if so, which password is
25 required.
26
27
28 The following options can be passed to the module:
29
30 debug syslog(3C) debugging information at the LOG_DEBUG
31 level
32
33
34 nowarn Turn off warning messages
35
36
37 server_policy If the account authority for the user, as specified by
38 PAM_USER, is a server, do not apply the Unix policy
39 from the passwd entry in the name service switch.
40
41
43 The following error codes are returned:
44
45 PAM_BUF_ERR Memory buffer error
46
47
48 PAM_IGNORE Ignore module, not participating in result
49
50
51 PAM_SUCCESS Successfully obtains authentication token
52
53
54 PAM_SYSTEM_ERR System error
55
56
58 See attributes(5) for descriptions of the following attributes:
59
60
61
62
63 ┌─────────────────────────────┬─────────────────────────────┐
64 │ ATTRIBUTE TYPE │ ATTRIBUTE VALUE │
65 ├─────────────────────────────┼─────────────────────────────┤
66 │Interface Stability │Evolving │
67 ├─────────────────────────────┼─────────────────────────────┤
68 │MT Level │MT-Safe with exceptions │
69 └─────────────────────────────┴─────────────────────────────┘
70
72 passwd(1), pam(3PAM), pam_authenticate(3PAM), pam_start(3PAM),
73 pam_set_item(3PAM), syslog(3C), libpam(3LIB), pam.conf(4),
74 attributes(5), pam_authtok_check(5), pam_authtok_get(5), pam_auth‐
75 tok_store(5), pam_dhkeys(5), pam_unix_account(5), pam_unix_auth(5),
76 pam_unix_session(5)
77
79 The interfaces in libpam(3LIB) are MT-Safe only if each thread within
80 the multi-threaded application uses its own PAM handle.
81
82
83 This module relies on the value of the current real UID, this module is
84 only safe for MT-applications that don't change UIDs during the call to
85 pam_authenticate(3PAM).
86
87
88 The pam_unix(5) module is no longer supported. Similar functionality is
89 provided by pam_authtok_check(5), pam_authtok_get(5), pam_auth‐
90 tok_store(5), pam_dhkeys(5), pam_passwd_auth(5), pam_unix_account(5),
91 pam_unix_auth(5), and pam_unix_session(5).
92
93
94
95SunOS 5.11 10 Aug 2002 pam_passwd_auth(5)