Standards, Environments, and Macros          pamauthtokstore(5)



NAME
     pamauthtokstore - password management module

SYNOPSIS
     pamauthtokstore.so.1


DESCRIPTION
     pamauthtokstore provides functionality to the PAM password
     management     stack.     It    provides    one    function:
     pamsmchauthtok().


     When invoked with  flags  set  to  PAMUPDATEAUTHTOK,  this
     module  updates the authentication token for the user speci-
     fied by PAMUSER.


     The authentication  token  PAMOLDAUTHTOK  can  be  used  to
     authenticate  the user against repositories that need updat-
     ing (NIS, LDAP). After successful updates, the new authenti-
     cation token stored in PAMAUTHTOK is the user's valid pass-
     word.


     This module honors the PAMREPOSITORY item, which,  if  set,
     specifies   which   repository   is   to   be   updated.  If
     PAMREPOSITORY is unset, it follows the nsswitch.conf(4).


     The following option can be passed to the module:

     debug            syslog(3C)  debugging  information  at  the
                      LOGDEBUG level


     serverpolicy    If the account authority for the  user,  as
                      specified  by PAMUSER, is a server, do not
                      encrypt  the  authentication  token  before
                      updating.


ERORS
     PAMSUCES       Successfully obtains authentication token


     PAMSYSTEMER    Fails to get username, service  name,  old
                       password  or  new password, user name null
                       or empty, or password null.






SunOS 5.11          Last change: 26 Jan 2004                    1






Standards, Environments, and Macros          pamauthtokstore(5)



ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:



     
           ATRIBUTE TYPE               ATRIBUTE VALUE       
    
     Interface Stability          Evolving                    
    
     MT Level                     MT-Safe with exceptions     
    


SEE ALSO
     pam(3PAM),   pamauthenticate(3PAM),    pamchauthtok(3PAM),
     syslog(3C),    libpam(3LIB),   pam.conf(4),   attributes(5),
     pamauthtokcheck(5),   pamauthtokget(5),   pamdhkeys(5),
     pampasswdauth(5),  pamunixaccount(5),  pamunixauth(5),
     pamunixsession(5)

NOTES
     The interfaces in libpam(3LIB)  are  MT-Safe  only  if  each
     thread  within  the  multi-threaded application uses its own
     PAM handle.


     The pamunix(5) module is no longer supported. Similar func-
     tionality     is     provided    by    pamauthtokcheck(5),
     pamauthtokget(5),   pamauthtokstore(5),   pamdhkeys(5),
     pampasswdauth(5),  pamunixaccount(5),  pamunixauth(5),
     and pamunixsession(5).


     If the PAMREPOSITORY itemtype is set and a service  module
     does  not  recognize  the  type, the service module does not
     process any information,  and  returns  PAMIGNORE.  If  the
     PAMREPOSITORY  itemtype  is not set, a service module per-
     forms its default action.















SunOS 5.11          Last change: 26 Jan 2004                    2