1PAM_ACCT_MGMT(3) Linux-PAM Manual PAM_ACCT_MGMT(3)
2
3
4
6 pam_acct_mgmt - PAM account validation management
7
9 #include <security/pam_appl.h>
10
11 int pam_acct_mgmt(pam_handle_t *pamh, int flags);
12
14 The pam_acct_mgmt function is used to determine if the users account is
15 valid. It checks for authentication token and account expiration and
16 verifies access restrictions. It is typically called after the user has
17 been authenticated.
18
19 The pamh argument is an authentication handle obtained by a prior call
20 to pam_start(). The flags argument is the binary or of zero or more of
21 the following values:
22
23 PAM_SILENT
24 Do not emit any messages.
25
26 PAM_DISALLOW_NULL_AUTHTOK
27 The PAM module service should return PAM_NEW_AUTHTOK_REQD if the
28 user has a null authentication token.
29
31 PAM_ACCT_EXPIRED
32 User account has expired.
33
34 PAM_AUTH_ERR
35 Authentication failure.
36
37 PAM_NEW_AUTHTOK_REQD
38 The user account is valid but their authentication token is
39 expired. The correct response to this return-value is to require
40 that the user satisfies the pam_chauthtok() function before
41 obtaining service. It may not be possible for some applications to
42 do this. In such cases, the user should be denied access until such
43 time as they can update their password.
44
45 PAM_PERM_DENIED
46 Permission denied.
47
48 PAM_SUCCESS
49 The authentication token was successfully updated.
50
51 PAM_USER_UNKNOWN
52 User unknown to password service.
53
55 pam_start(3), pam_authenticate(3), pam_chauthtok(3), pam_strerror(3),
56 pam(8)
57
58
59
60Linux-PAM Manual 09/19/2013 PAM_ACCT_MGMT(3)