pam_sm_authenticate.3.xml 4.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.1.2//EN"
  3. "http://www.oasis-open.org/docbook/xml/4.1.2/docbookx.dtd">
  4. <refentry id='pam_sm_authenticate'>
  5. <refmeta>
  6. <refentrytitle>pam_sm_authenticate</refentrytitle>
  7. <manvolnum>3</manvolnum>
  8. <refmiscinfo class='setdesc'>Linux-PAM Manual</refmiscinfo>
  9. </refmeta>
  10. <refnamediv id="pam_sm_authenticate-name">
  11. <refname>pam_sm_authenticate</refname>
  12. <refpurpose>PAM service function for user authentication</refpurpose>
  13. </refnamediv>
  14. <!-- body begins here -->
  15. <refsynopsisdiv>
  16. <funcsynopsis id='pam_sm_authenticate-synopsis'>
  17. <funcsynopsisinfo>#include &lt;security/pam_modules.h&gt;</funcsynopsisinfo>
  18. <funcprototype>
  19. <funcdef>int <function>pam_sm_authenticate</function></funcdef>
  20. <paramdef>pam_handle_t *<parameter>pamh</parameter></paramdef>
  21. <paramdef>int <parameter>flags</parameter></paramdef>
  22. <paramdef>int <parameter>argc</parameter></paramdef>
  23. <paramdef>const char **<parameter>argv</parameter></paramdef>
  24. </funcprototype>
  25. </funcsynopsis>
  26. </refsynopsisdiv>
  27. <refsect1 id='pam_sm_authenticate-description'>
  28. <title>DESCRIPTION</title>
  29. <para>
  30. The <function>pam_sm_authenticate</function> function is the service
  31. module's implementation of the
  32. <citerefentry>
  33. <refentrytitle>pam_authenticate</refentrytitle><manvolnum>3</manvolnum>
  34. </citerefentry> interface.
  35. </para>
  36. <para>
  37. This function performs the task of authenticating the user.
  38. </para>
  39. <para>
  40. Valid flags, which may be logically OR'd with
  41. <emphasis>PAM_SILENT</emphasis>, are:
  42. </para>
  43. <variablelist>
  44. <varlistentry>
  45. <term>PAM_SILENT</term>
  46. <listitem>
  47. <para>
  48. Do not emit any messages.
  49. </para>
  50. </listitem>
  51. </varlistentry>
  52. <varlistentry>
  53. <term>PAM_DISALLOW_NULL_AUTHTOK</term>
  54. <listitem>
  55. <para>
  56. Return <emphasis remap='B'>PAM_AUTH_ERR</emphasis> if the
  57. database of authentication tokens for this authentication
  58. mechanism has a <emphasis>NULL</emphasis> entry for the user.
  59. Without this flag, such a <emphasis>NULL</emphasis> token
  60. will lead to a success without the user being prompted.
  61. </para>
  62. </listitem>
  63. </varlistentry>
  64. </variablelist>
  65. </refsect1>
  66. <refsect1 id="pam_sm_authenticate-return_values">
  67. <title>RETURN VALUES</title>
  68. <variablelist>
  69. <varlistentry>
  70. <term>PAM_AUTH_ERR</term>
  71. <listitem>
  72. <para>
  73. Authentication failure.
  74. </para>
  75. </listitem>
  76. </varlistentry>
  77. <varlistentry>
  78. <term>PAM_CRED_INSUFFICIENT</term>
  79. <listitem>
  80. <para>
  81. For some reason the application does not have sufficient
  82. credentials to authenticate the user.
  83. </para>
  84. </listitem>
  85. </varlistentry>
  86. <varlistentry>
  87. <term>PAM_AUTHINFO_UNAVAIL</term>
  88. <listitem>
  89. <para>
  90. The modules were not able to access the authentication
  91. information. This might be due to a network or hardware
  92. failure etc.
  93. </para>
  94. </listitem>
  95. </varlistentry>
  96. <varlistentry>
  97. <term>PAM_SUCCESS</term>
  98. <listitem>
  99. <para>
  100. The authentication token was successfully updated.
  101. </para>
  102. </listitem>
  103. </varlistentry>
  104. <varlistentry>
  105. <term>PAM_USER_UNKNOWN</term>
  106. <listitem>
  107. <para>
  108. The supplied username is not known to the authentication
  109. service.
  110. </para>
  111. </listitem>
  112. </varlistentry>
  113. <varlistentry>
  114. <term>PAM_MAXTRIES</term>
  115. <listitem>
  116. <para>
  117. One or more of the authentication modules has reached its
  118. limit of tries authenticating the user. Do not try again.
  119. </para>
  120. </listitem>
  121. </varlistentry>
  122. </variablelist>
  123. </refsect1>
  124. <refsect1 id='pam_sm_authenticate-see_also'>
  125. <title>SEE ALSO</title>
  126. <para>
  127. <citerefentry>
  128. <refentrytitle>pam</refentrytitle><manvolnum>3</manvolnum>
  129. </citerefentry>,
  130. <citerefentry>
  131. <refentrytitle>pam_authenticate</refentrytitle><manvolnum>3</manvolnum>
  132. </citerefentry>,
  133. <citerefentry>
  134. <refentrytitle>pam_sm_setcred</refentrytitle><manvolnum>3</manvolnum>
  135. </citerefentry>,
  136. <citerefentry>
  137. <refentrytitle>pam_strerror</refentrytitle><manvolnum>3</manvolnum>
  138. </citerefentry>,
  139. <citerefentry>
  140. <refentrytitle>PAM</refentrytitle><manvolnum>8</manvolnum>
  141. </citerefentry>
  142. </para>
  143. </refsect1>
  144. </refentry>