pam_acct_mgmt(3)

NAME
     pam_acct_mgmt - perform PAM account validation procedures


SYNOPSIS
     cc [ flag ... ] file ...  -lpam [ library ... ]

     #include <security/pam_appl.h>

     int pam_acct_mgmt(pam_handle_t *pamh, int flags);

DESCRIPTION
     The  function  pam_acct_mgmt() is called to determine if the current user's
     account is valid.  This includes checking for password and account  expira-
     tion, as well as verifying access hour restrictions.  This function is typ-
     ically  called  after  the  user  has been authenticated with pam_authenti-
     cate(3).

     The pamh argument is an authentication handle obtained by a prior  call  to
     pam_start().  The following flags may be set in the flags field:

            PAM_SILENT                         The  account  management  service
                                               should not generate any messages

            PAM_DISALLOW_NULL_AUTHTOK          The  account  management  service
                                               should  return  PAM_AUTHTOKEN_RE-
                                               QUIRED if the user has a null au-
                                               thentication token


RETURN VALUES
     Upon successful completion, PAM_SUCCESS is returned.  In  addition  to  the
     error  return  values  described in pam(3), the following values may be re-
     turned:

            PAM_USER_UNKNOWN          User not known to underlying account  man-
                                      agement module

            PAM_AUTH_ERR              Authentication failure

            PAM_AUTHTOKEN_REQD        New authentication token required. This is
                                      normally  returned if the machine security
                                      policies require that the password  should
                                      be changed because the password is NULL or
                                      it has aged.

            PAM_ACCT_EXPIRED          User account has expired

SEE ALSO
     pam(3), pam_start(3), pam_authenticate(3)