1pam_authtok_store(5)  Standards, Environments, and Macros pam_authtok_store(5)
2
3
4

NAME

6       pam_authtok_store - password management module
7

SYNOPSIS

9       pam_authtok_store.so.1
10
11

DESCRIPTION

13       pam_authtok_store provides functionality to the PAM password management
14       stack. It provides one function: pam_sm_chauthtok().
15
16
17       When invoked with flags set to PAM_UPDATE_AUTHTOK, this module  updates
18       the authentication token for the user specified by PAM_USER.
19
20
21       The authentication token PAM_OLDAUTHTOK can be used to authenticate the
22       user against repositories that need updating (NIS,  LDAP).  After  suc‐
23       cessful  updates, the new authentication token stored in PAM_AUTHTOK is
24       the user's valid password.
25
26
27       This module honors the PAM_REPOSITORY item, which,  if  set,  specifies
28       which  repository is to be updated. If PAM_REPOSITORY is unset, it fol‐
29       lows the nsswitch.conf(4).
30
31
32       The following option can be passed to the module:
33
34       debug            syslog(3C)  debugging  information  at  the  LOG_DEBUG
35                        level
36
37
38       server_policy    If the account authority for the user, as specified by
39                        PAM_USER, is a server, do not encrypt the  authentica‐
40                        tion token before updating.
41
42

ERRORS

44       PAM_SUCCESS       Successfully obtains authentication token
45
46
47       PAM_SYSTEM_ERR    Fails  to get username, service name, old password or
48                         new password, user name null or  empty,  or  password
49                         null.
50
51

ATTRIBUTES

53       See attributes(5) for descriptions of the following attributes:
54
55
56
57
58       ┌─────────────────────────────┬─────────────────────────────┐
59       │      ATTRIBUTE TYPE         │      ATTRIBUTE VALUE        │
60       ├─────────────────────────────┼─────────────────────────────┤
61       │Interface Stability          │Evolving                     │
62       ├─────────────────────────────┼─────────────────────────────┤
63       │MT Level                     │MT-Safe with exceptions      │
64       └─────────────────────────────┴─────────────────────────────┘
65

SEE ALSO

67       pam(3PAM),   pam_authenticate(3PAM),  pam_chauthtok(3PAM),  syslog(3C),
68       libpam(3LIB),   pam.conf(4),    attributes(5),    pam_authtok_check(5),
69       pam_authtok_get(5),          pam_dhkeys(5),         pam_passwd_auth(5),
70       pam_unix_account(5), pam_unix_auth(5), pam_unix_session(5)
71

NOTES

73       The interfaces in libpam(3LIB) are MT-Safe only if each  thread  within
74       the multi-threaded application uses its own PAM handle.
75
76
77       The pam_unix(5) module is no longer supported. Similar functionality is
78       provided   by   pam_authtok_check(5),   pam_authtok_get(5),   pam_auth‐
79       tok_store(5),  pam_dhkeys(5),  pam_passwd_auth(5), pam_unix_account(5),
80       pam_unix_auth(5), and pam_unix_session(5).
81
82
83       If the PAM_REPOSITORY item_type is set and a service  module  does  not
84       recognize  the  type,  the service module does not process any informa‐
85       tion, and returns PAM_IGNORE. If the PAM_REPOSITORY  item_type  is  not
86       set, a service module performs its default action.
87
88
89
90SunOS 5.11                        26 Jan 2004             pam_authtok_store(5)
Impressum