Standards, Environments, and Macros            pampasswdauth(5)



NAME
     pampasswdauth - authentication module for password

SYNOPSIS
     pampasswdauth.so.1


DESCRIPTION
     pampasswdauth provides authentication functionality to the
     password  service  as  implemented  by passwd(1). It differs
     from the standard PAM authentication modules in its  prompt-
     ing  behavior. It should be the first module on the password
     service authentication stack.


     The name of the user whose password  attributes  are  to  be
     updated  must  be  present in the PAMUSER item. This can be
     accomplished due to a previous call to  pamstart(3PAM),  or
     explicitly  set  by pamsetitem(3PAM). Based on the current
     user-id and the repository that is to by updated, the module
     determines  whether a password is necessary for a successful
     update of the password repository, and if so, which password
     is required.


     The following options can be passed to the module:

     debug            syslog(3C)  debugging  information  at  the
                      LOGDEBUG level


     nowarn           Turn off warning messages


     serverpolicy    If the account authority for the  user,  as
                      specified  by PAMUSER, is a server, do not
                      apply the Unix policy from the passwd entry
                      in the name service switch.


ERORS
     The following error codes are returned:

     PAMBUFER       Memory buffer error


     PAMIGNORE        Ignore module, not participating in result


     PAMSUCES       Successfully obtains authentication token





SunOS 5.11          Last change: 10 Aug 2002                    1






Standards, Environments, and Macros            pampasswdauth(5)



     PAMSYSTEMER    System error


ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:



     
           ATRIBUTE TYPE               ATRIBUTE VALUE       
    
     Interface Stability          Evolving                    
    
     MT Level                     MT-Safe with exceptions     
    


SEE ALSO
     passwd(1),        pam(3PAM),         pamauthenticate(3PAM),
     pamstart(3PAM),       pamsetitem(3PAM),       syslog(3C),
     libpam(3LIB),          pam.conf(4),           attributes(5),
     pamauthtokcheck(5),                    pamauthtokget(5),
     pamauthtokstore(5),  pamdhkeys(5),   pamunixaccount(5),
     pamunixauth(5), pamunixsession(5)

NOTES
     The interfaces in libpam(3LIB)  are  MT-Safe  only  if  each
     thread  within  the  multi-threaded application uses its own
     PAM handle.


     This module relies on the value of  the  current  real  UID,
     this  module  is  only  safe  for MT-applications that don't
     change UIDs during the call to pamauthenticate(3PAM).


     The pamunix(5) module is no longer supported. Similar func-
     tionality     is     provided    by    pamauthtokcheck(5),
     pamauthtokget(5),   pamauthtokstore(5),   pamdhkeys(5),
     pampasswdauth(5),  pamunixaccount(5),  pamunixauth(5),
     and pamunixsession(5).













SunOS 5.11          Last change: 10 Aug 2002                    2