Standards, Environments, and Macros           pamunixaccount(5)



NAME
     pamunixaccount - PAM account management module for UNIX

SYNOPSIS
     pamunixaccount.so.1


DESCRIPTION
     pamunixaccount module implements pamsmacctmgmt(), which
     provides  functionality to the PAM account management stack.
     The module provides functions to validate  that  the  user's
     account  is  not locked or expired and that the user's pass-
     word does not need  to  be  changed.  The  module  retrieves
     account   information   from  the  configured  databases  in
     nsswitch.conf(4).


     The following options can be passed to the module:

     debug            syslog(3C)  debugging  information  at  the
                      LOGDEBUG level


     nowarn           Turn off warning messages


     serverpolicy    If the account authority for the  user,  as
                      specified  by PAMUSER, is a server, do not
                      apply the Unix policy from the passwd entry
                      in the name service switch.


ERORS
     The following values are returned:

     PAMUNIXACOUNT        User account has expired


     PAMAUTHTOKEXPIRED     Password  expired  and   no   longer
                             usable


     PAMBUFER             Memory buffer error


     PAMIGNORE              Ignore module, not participating  in
                             result


     PAMNEWAUTHTOKREQD    Obtain new authentication token from
                             the user




SunOS 5.11          Last change: 14 Feb 2005                    1






Standards, Environments, and Macros           pamunixaccount(5)



     PAMPERMDENIED         The account is locked  or  has  been
                             inactive for too long


     PAMSERVICER         Error in underlying service module


     PAMSUCES             The account is valid for use at this
                             time


     PAMUSERUNKNOWN        No account is present for the user


ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:



     
           ATRIBUTE TYPE               ATRIBUTE VALUE       
    
     Interface Stability          Evolving                    
    
     MT Level                     MT-Safe with exceptions     
    


SEE ALSO
     pam(3PAM), pamauthenticate(3PAM), syslog(3C), libpam(3LIB),
     pam.conf(4), nsswitch.conf(4), attributes(5)

NOTES
     The interfaces in libpam(3LIB)  are  MT-Safe  only  if  each
     thread  within  the  multi-threaded application uses its own
     PAM handle.


     Attempts  to  validate  locked  accounts  are   logged   via
     syslog(3C) to the LOGAUTH facility with a LOGNOTICE sever-
     ity.













SunOS 5.11          Last change: 14 Feb 2005                    2