LIBPAM(3LIB) Interface Libraries LIBPAM(3LIB)

NAME


libpam - PAM (Pluggable Authentication Module) library

LIBRARY


PAM (Pluggable Authentication Module) Library (libpam, -lpam)

SYNOPSIS


#include <security/pam_appl.h>

DESCRIPTION


Functions in this library provide routines for the Pluggable Authentication
Module (PAM).

Various PAM implementations have disagreed on whether certain parts of the
function signatures for the pam_get_item() and pam_get_user() functions, as
well as parts of the pam_conv structure, used the const qualifier.
Historically illumos did not; however this was changed to align with other
common implementations (e.g. the Linux PAM project and various *BSDs). If
necessary the non-const definitions of these types can be selected by
defining the macro _PAM_LEGACY_NONCONST prior to including
<security/pam_appl.h>.

INTERFACES


The shared object libmap.so.1 provides the public interfaces defined below.
See Intro(3) for additional information on shared object interfaces.

pam_acct_mgmt pam_authenticate
pam_chauthtok pam_close_session
pam_end pam_get_data
pam_get_item pam_get_user
pam_getenv pam_getenvlist
pam_open_session pam_putenv
pam_set_data pam_set_item
pam_setcred pam_start
pam_strerror

FILES


/lib/libpam.so.1
32-bit shared object

/lib/64/libpam.so.1
64-bit shared object

/etc/pam.conf
configuration file

/usr/lib/security/pam_dial_auth.so.1
authentication management PAM module for dialups

/usr/lib/security/pam_rhosts_auth.so.1
authentication management PAM modules that use ruserok()

/usr/lib/security/pam_sample.so.1
sample PAM module

INTERFACE STABILITY


Committed

MT-LEVEL
MT-Safe-with-exceptions

SEE ALSO


pvs(1), Intro(3), pam(3PAM), pam.conf(5), attributes(7),
pam_authtok_check(7), pam_authtok_get(7), pam_authtok_store(7),
pam_dhkeys(7), pam_dial_auth(7), pam_passwd_auth(7), pam_rhosts_auth(7),
pam_sample(7), pam_unix_account(7), pam_unix_auth(7), pam_unix_session(7)

NOTES


The functions in libpam are MT-Safe only if each thread within the
multithreaded application uses its own PAM handle.

The pam_unix module is no longer supported. Similar functionality is
provided by pam_authtok_check(7), pam_authtok_get(7), pam_authtok_store(7),
pam_dhkeys(7), pam_passwd_auth(7), pam_unix_account(7), pam_unix_auth(7),
and pam_unix_session(7).

illumos July 6, 2024 illumos