HP-UX Reference (11i v2 04/09) - 5 Miscellaneous Topics (vol 9)

p
pam_updbe(5) pam_updbe(5)
NAME
pam_updbe - User policy definition service module
SYNOPSIS
/usr/lib/security/$ISA/libpam_updbe.so.1
DESCRIPTION
The user policy definition service module for PAM,
/usr/lib/security/$ISA/libpam_updbe.so.1
, reads options defined in the user configuration
file,
/etc/pam_user.conf
(see pam_user.conf(4)) and uses
pam_set_data (see pam_set_data (3)) to
store the information in the pam handle for subsequent service modules to use. Service modules perform
pam_get_data to retrieve corresponding information from the pam handle when the user is authenti-
cated, or when the user password is changed.
The use of
pam_updbe is not mandatory. It is needed only when per user configuration is used. How-
ever, in order for the functionality of
pam_updbe to take effect, it must be listed as the first service
module after
pam_hpsec if pam_hpsec has been configured for the given service in
/etc/pam.conf
.
Like any other service module,
pam_updbe provides interfaces for all four PAM modules: authentica-
tion, account management, session management and password management. Each module just reads the
options defined for the specific module type.
For an interpretation of the module path, please refer to the related information in pam.conf (4).
UPDBE Authentication Module
The UPDBE authentication component provides functions to read options defined in
pam_user.conf
for the module type "auth". The module data name used is
PAM_AUTH_USER.
Unix Account Management Module
The UNIX account management component provides a function to read options defined in
pam_user.conf for the module type "account". The module data name used is
PAM_ACCOUNT_USER.
Unix Session Management Module
The UNIX session management component provides a function to read options defined in
pam_user.conf for the module type "session". The module data name used is
PAM_SESSION_USER.
Unix Password Management Module
The UNIX password management component provides a function to read options defined in
pam_user.conf for the module type "password". The module data name used is
PAM_PASSWORD_USER
.
SEE ALSO
pam(3), pam_set_data(3), pam.conf(4), pam_user.conf(4), pam_hpsec(5).
Section 5−−260 Hewlett-Packard Company − 1 − HP-UX 11i Version 2: September 2004