pam_updbe.5 (2010 09)

p
pam_updbe(5) pam_updbe(5)
NAME
pam_updbe - User policy definition service module
SYNOPSIS
/usr/lib/security/libpam_updbe.1
DESCRIPTION
The user policy definition service module for PAM,
/usr/lib/security/libpam_updbe.1
, reads
options defined in the user configuration file,
/etc/pam_user.conf
(see pam_user.conf(4)) and uses
pam_set_data (see pam_set_data (3)) to store the information in the pam handle for subsequent service
modules to use. Service modules perform
pam_get_data to retrieve corresponding information from
the pam handle when the user is authenticated, or when the user password is changed.
The use of
pam_updbe is not mandatory. It is needed only when per user configuration is used. How-
ever, in order for the functionality of
pam_updbe to take effect, it must be listed as the first service
module after
pam_hpsec in /etc/pam.conf
.
Like any other service module,
pam_updbe provides interfaces for all four PAM modules: authentica-
tion, account management, session management and password management. Each module just reads the
options defined for the specific module type.
UPDBE Authentication Module
The UPDBE authentication component provides functions to read options defined in
pam_user.conf
for the module type "auth". The module data name used is
PAM_AUTH_USER.
Unix Account Management Module
The UNIX account management component provides a function to read options defined in
pam_user.conf for the module type "account". The module data name used is
PAM_ACCOUNT_USER.
Unix Session Management Module
The UNIX session management component provides a function to read options defined in
pam_user.conf for the module type "session". The module data name used is
PAM_SESSION_USER.
Unix Password Management Module
The UNIX password management component provides a function to read options defined in
pam_user.conf for the module type "password". The module data name used is
PAM_PASSWORD_USER
.
SEE ALSO
pam(3), pam_set_data(3), pam.conf(4), pam_user.conf(4), pam_hpsec(5).
HP-UX 11i Version 3: September 2010 − 1 − Hewlett-Packard Company 1