pam_setcred.3 (2010 09)

pam_setcred(3) pam_setcred(3)

NAME

pam_setcred - modify/delete user credentials for an authentication service

SYNOPSIS

cc [ ﬂag ... ] ﬁle ...

-lpam [ library ... ]

#include <security/pam_appl.h>

int pam_setcred(pam_handle_t *

pamh, int ﬂags);

DESCRIPTION

pam_setcred()

is used to establish, modify, or delete user credentials. pam_setcred()

is typically

called after the user has been authenticated and after a session has been opened (refer to

pam_authenticate(3), pam_acct_mgmt(3), and pam_open_session(3)).

The user is speciﬁed by a prior call to

pam_start() or pam_set_item()

, and is referenced by the

authentication handle, pamh. The following ﬂags may be set in the ﬂags ﬁeld. Note that the ﬁrst four

ﬂags are mutually exclusive:

PAM_ESTABLISH_CRED

Set user credentials for an authentication service.

PAM_DELETE_CRED

Delete user credentials associated with an authentication service.

PAM_REINITIALIZE_CRED

Reinitialize user credentials.

PAM_REFRESH_CRED

Extend lifetime of user credentials.

PAM_SILENT Authentication service should not generate any messages.

If none of the ﬂags are set,

PAM_ESTABLISH_CRED

is used as the default.

APPLICATION USAGE

Refer to pam(3) for information on thread-safety of PAM interfaces.

RETURN VALUES

Upon success,

pam_setcred( ) returns PAM_SUCCESS

. In addition to the error return values

described in pam(3), the following values may be returned upon error:

PAM_CRED_UNAVAIL Underlying authentication service can not retrieve user credentials unavail-

able.

PAM_CRED_EXPIRED User credentials expired.

PAM_USER_UNKNOWN

User unknown to underlying authentication service.

PAM_CRED_ERR Failure setting user credentials.