NAME

libpam — PAM (Pluggable Authentication Module) library

LIBRARY

PAM (Pluggable Authentication Module) Library (libpam, -lpam)

SYNOPSIS

#include <security/pam_appl.h>

DESCRIPTION

Functions in this library provide routines for the Pluggable Authentication Module (PAM).

Various PAM implementations have disagreed on whether certain parts of the function signatures for the pam_get_item() and pam_get_user() functions, as well as parts of the pam_conv structure, used the const qualifier. Historically illumos did not; however this was changed to align with other common implementations (e.g. the Linux PAM project and various *BSDs). If necessary the non-const definitions of these types can be selected by defining the macro _PAM_LEGACY_NONCONST prior to including <security/pam_appl.h>.

INTERFACES

The shared object libmap.so.1 provides the public interfaces defined below. See Intro(3) for additional information on shared object interfaces.

pam_acct_mgmt	pam_authenticate
pam_chauthtok	pam_close_session
pam_end	pam_get_data
pam_get_item	pam_get_user
pam_getenv	pam_getenvlist
pam_open_session	pam_putenv
pam_set_data	pam_set_item
pam_setcred	pam_start
pam_strerror

FILES

/lib/libpam.so.1: 32-bit shared object
/lib/64/libpam.so.1: 64-bit shared object
/etc/pam.conf: configuration file
/usr/lib/security/pam_dial_auth.so.1: authentication management PAM module for dialups
/usr/lib/security/pam_rhosts_auth.so.1: authentication management PAM modules that use ruserok()
/usr/lib/security/pam_sample.so.1: sample PAM module

INTERFACE STABILITY

Committed

MT-LEVEL

MT-Safe-with-exceptions

NOTES

The functions in libpam are MT-Safe only if each thread within the multithreaded application uses its own PAM handle.

The pam_unix module is no longer supported. Similar functionality is provided by pam_authtok_check(7), pam_authtok_get(7), pam_authtok_store(7), pam_dhkeys(7), pam_passwd_auth(7), pam_unix_account(7), pam_unix_auth(7), and pam_unix_session(7).