pam_unix_account(5)

NAME

     pam_unix_account - PAM account management module for UNIX

SYNOPSIS

     pam_unix_account.so.1

DESCRIPTION

     pam_unix_account provides functionality to the  PAM  account
     management  stack. The function pam(3PAM) function retrieves
     password aging information from the  repositories  specified
     in  nsswitch.conf(4),  and  verifies that the user's account
     and password have not expired.

     The following options can be passed to the module:

     debug syslog(3C)  debugging  information  at  the  LOG_DEBUG
           level

     nowarn
           Turn off warning messages

     server_policy
           If the account authority for the user, as specified by
           PAM_USER,  is  a  server, do not apply the Unix policy
           from the passwd entry in the name service switch.

ERRORS

     The following values are returned:

     PAM_AUTHTOK_EXPIRED
           Password expired and no longer usable

     PAM_BUF_ERR
           Memory buffer error

     PAM_IGNORE
           Ignore module, not participating in result

     PAM_NEW_AUTHTOK_REQD
           Obtain new authentication token from the user

     PAM_SERVICE_ERR
           Error in underlying service module

     PAM_SUCCESS
           Successfully obtains authentication token

ATTRIBUTES

     See attributes(5) for descriptions of the  following  attri-
     butes:

     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Interface Stability         | Evolving                    |
    |_____________________________|_____________________________|
    | MT Level                    | MT-Safe with exceptions     |
    |_____________________________|_____________________________|

SEE ALSO

     pam(3PAM), pam_authenticate(3PAM), syslog(3C), libpam(3LIB),
     pam.conf(4),         nsswitch.conf(4),        attributes(5),
     pam_authtok_check(5),                    pam_authtok_get(5),
     pam_authtok_store(5),   pam_dhkeys(5),   pam_passwd_auth(5),
     pam_unix(5), pam_unix_auth(5), pam_unix_session(5)

NOTES

     The interfaces in libpam(3LIB)  are  MT-Safe  only  if  each
     thread  within  the  multi-threaded application uses its own
     PAM handle.

     The pam_unix(5) module might not be supported  in  a  future
     release.    Similar    functionality    is    provided    by
     pam_authtok_check(5),                    pam_authtok_get(5),
     pam_authtok_store(5),   pam_dhkeys(5),   pam_passwd_auth(5),
     pam_unix_account(5),          pam_unix_auth(5),          and
     pam_unix_session(5).