pam_open_session.3 (2010 09)

pam_open_session(3) pam_open_session(3)

NAME

pam_open_session, pam_close_session - perform PAM session creation and termination operations

SYNOPSIS

cc [ ﬂag ... ] ﬁle ...

-lpam [ library ... ]

#include <security/pam_appl.h>

int pam_open_session(pam_handle_t

*pamh, int ﬂags);

int pam_close_session(pam_handle_t

*pamh, int ﬂags);

DESCRIPTION

pam_open_session()

is called after a user has been successfully authenticated (refer to

pam_authenticate(3) and pam_acct_mgmt(3)) and is used to notify the session modules that a new ses-

sion has been initiated. All programs that use the pam(3) library should invoke

pam_open_session()

when beginning a new session. Upon termination of this activity,

pam_close_session()

should be invoked to inform pam(3) that the session has terminated.

The pamh argument is an authentication handle obtained by a prior call to

pam_start(). The follow-

ing ﬂag may be set in the ﬂags ﬁeld for

pam_open_session( )

and pam_close_session()

PAM_SILENT The session service should not generate any messages.

APPLICATION USAGE

Refer to pam(3) for information on thread-safety of PAM interfaces.

RETURN VALUES

Upon successful completion,

PAM_SUCCESS is returned. In addition to the return values deﬁned in

pam(3), the following value may be returned on error:

PAM_SESSION_ERR Can not make/remove an entry for the speciﬁed session.