pam_sm_acct_mgmt(3) — Linux manual page

PAM_SM_ACCT_MGMT(3)         Linux-PAM Manual         PAM_SM_ACCT_MGMT(3)

NAME

       pam_sm_acct_mgmt - PAM service function for account management

SYNOPSIS

       #include <security/pam_modules.h>

       int pam_sm_acct_mgmt(pam_handle_t *pamh, int flags, int argc,
                            const char **argv);

DESCRIPTION

       The pam_sm_acct_mgmt function is the service module's
       implementation of the pam_acct_mgmt(3) interface.

       This function performs the task of establishing whether the user
       is permitted to gain access at this time. It should be understood
       that the user has previously been validated by an authentication
       module. This function checks for other things. Such things might
       be: the time of day or the date, the terminal line, remote
       hostname, etc. This function may also determine things like the
       expiration on passwords, and respond that the user change it
       before continuing.

       Valid flags, which may be logically OR'd with PAM_SILENT, are:

       PAM_SILENT
           Do not emit any messages.

       PAM_DISALLOW_NULL_AUTHTOK
           Return PAM_AUTH_ERR if the database of authentication tokens
           for this authentication mechanism has a NULL entry for the
           user.

RETURN VALUES

       PAM_ACCT_EXPIRED
           User account has expired.

       PAM_AUTH_ERR
           Authentication failure.

       PAM_NEW_AUTHTOK_REQD
           The user's authentication token has expired. Before calling
           this function again the application will arrange for a new
           one to be given. This will likely result in a call to
           pam_sm_chauthtok().

       PAM_PERM_DENIED
           Permission denied.

       PAM_SUCCESS
           The authentication token was successfully updated.

       PAM_USER_UNKNOWN
           User unknown to password service.

SEE ALSO

       pam(3), pam_acct_mgmt(3), pam_sm_chauthtok(3), pam_strerror(3),
       PAM(8)

COLOPHON

       This page is part of the linux-pam (Pluggable Authentication
       Modules for Linux) project.  Information about the project can be
       found at ⟨http://www.linux-pam.org/⟩.  If you have a bug report
       for this manual page, see ⟨//www.linux-pam.org/⟩.  This page was
       obtained from the project's upstream Git repository
       ⟨https://github.com/linux-pam/linux-pam.git⟩ on 2023-12-22.  (At
       that time, the date of the most recent commit that was found in
       the repository was 2023-12-18.)  If you discover any rendering
       problems in this HTML version of the page, or you believe there
       is a better or more up-to-date source for the page, or you have
       corrections or improvements to the information in this COLOPHON
       (which is not part of the original manual page), send a mail to
       man-pages@man7.org

Linux-PAM Manual               12/22/2023            PAM_SM_ACCT_MGMT(3)

Pages that refer to this page: pam_debug(8)

---