pam_updbe(5)                                                   pam_updbe(5)




 NAME    [Toc]    [Back]
      pam_updbe - User policy definition service module

 SYNOPSIS    [Toc]    [Back]
      /usr/lib/security/$ISA/libpam_updbe.so.1

 DESCRIPTION    [Toc]    [Back]
      The user policy definition service module for PAM,
      /usr/lib/security/$ISA/libpam_updbe.so.1, reads options defined in the
      user configuration file, /etc/pam_user.conf (see pam_user.conf(4)) and
      uses pam_set_data (see pam_set_data(3)) to store the information in
      the pam handle for subsequent service modules to use.  Service modules
      perform pam_get_data to retrieve corresponding information from the
      pam handle when the user is authenticated, or when the user password
      is changed.

      The use of pam_updbe is not mandatory.  It is needed only when per
      user configuration is used.  However, in order for the functionality
      of pam_updbe to take effect, it must be listed as the first service
      module after pam_hpsec if pam_hpsec has been configured for the given
      service in /etc/pam.conf.

      Like any other service module, pam_updbe provides interfaces for all
      four PAM modules: authentication, account management, session
      management and password management.  Each module just reads the
      options defined for the specific module type.

      For an interpretation of the module path, please refer to the related
      information in pam.conf(4).

    UPDBE Authentication Module    [Toc]    [Back]
      The UPDBE authentication component provides functions to read options
      defined in pam_user.conf for the module type "auth".  The module data
      name used is PAM_AUTH_USER.

    Unix Account Management Module    [Toc]    [Back]
      The UNIX account management component provides a function to read
      options defined in pam_user.conf for the module type "account".  The
      module data name used is PAM_ACCOUNT_USER.

    Unix Session Management Module    [Toc]    [Back]
      The UNIX session management component provides a function to read
      options defined in pam_user.conf for the module type "session".  The
      module data name used is PAM_SESSION_USER.

    Unix Password Management Module    [Toc]    [Back]
      The UNIX password management component provides a function to read
      options defined in pam_user.conf for the module type "password".  The
      module data name used is PAM_PASSWORD_USER.





 Hewlett-Packard Company            - 1 -      HP-UX 11i Version 2: Sep 2004






 pam_updbe(5)                                                   pam_updbe(5)




 SEE ALSO    [Toc]    [Back]
      pam(3), pam_set_data(3), pam.conf(4), pam_user.conf(4), pam_hpsec(5).


 Hewlett-Packard Company            - 2 -      HP-UX 11i Version 2: Sep 2004