NAME
pam_updbe — User policy definition service module
SYNOPSIS
/usr/lib/security/libpam_updbe.1
DESCRIPTION
The user policy definition service module for PAM,
/usr/lib/security/libpam_updbe.1,
reads
options
defined in the user configuration file,
/etc/pam_user.conf
(see
pam_user.conf(4))
and uses
pam_set_data
(see
pam_set_data(3))
to store the information in the
pam handle
for subsequent service modules to use.
Service modules perform
pam_get_data
to retrieve corresponding information from the
pam handle
when the user is authenticated, or when the user
password is changed.
The use of
pam_updbe
is not mandatory. It is needed only when per user
configuration is used. However, in order for the functionality
of
pam_updbe
to take effect, it must be listed as the first service module after
pam_hpsec
in
/etc/pam.conf.
Like any other service module,
pam_updbe
provides interfaces for all four
PAM modules: authentication, account management, session management
and password management.
Each module just reads the options defined for the specific
module type.
UPDBE Authentication Module
The UPDBE authentication component
provides functions to read options defined in
pam_user.conf
for the module type "auth".
The module data name used is
PAM_AUTH_USER.
Unix Account Management Module
The UNIX account management component
provides a function to read options defined in
pam_user.conf
for the module type "account".
The module data name used is
PAM_ACCOUNT_USER.
Unix Session Management Module
The UNIX session management component
provides a function to read options defined in
pam_user.conf
for the module type "session".
The module data name used is
PAM_SESSION_USER.
Unix Password Management Module
The UNIX password management component
provides a function to read options defined in
pam_user.conf
for the module type "password".
The module data name used is
PAM_PASSWORD_USER.
Printable version
