Provides AIX® style authentication, account management, password management, and session management for PAM.
The pam_aix module provides AIX style authentication behaviors to PAM. The module has support for each of the PAM module types - authentication, account management, password management and session management. Each of these types provides full AIX support for users defined in local or remote registries.
Communication from the pam_aix module to the user is handled through the PAM_CONV item, which is set by pam_start or pam_set_item. All messages displayed by pam_aix are AIX messages and are internationalized.
#
# Use AIX system authentication
#
OTHER auth required pam_aix
OTHER account required pam_aix
OTHER session required pam_aix
OTHER password required pam_aix
Supported PAM module types
Options
Item | Description |
---|---|
debug | Log debugging information to syslog. |
mode | Specifying the mode option
for a service allows the login restrictions checks to be customized
as needed for a PAM service. The value specified for mode can be one of the following strings:
|
nowarn | Do not display warning messages. |
no_pwd_ck | Do not check for password expiration. |
use_first_pass | Use a previously entered password, do not prompt for a new one. |
try_first_pass | Try a previously entered password. If it fails, prompt for a new one. |
use_new_state | AIX builds and maintains state information when authenticating a user. By default, the pam_aix module will use the same state information throughout a PAM session. This can produce results that are correct in terms of AIX authentication but are unexpected within the PAM framework. For example, pam_authenticate requests may fail due to access restrictions. If this behavior is not desired for a given module type, specify the use_new_state option to use new state information for each invocation. |
Return Values
Upon successful completion the pam_aix module returns PAM_SUCCESS. If a failure occurs a PAM error code will be returned, depending on the actual error.
/usr/lib/security/pam_aix
/usr/lib/security/64