pam_unix_account provides functionality to the PAM account management stack. The function pam(3PAM) function retrieves password aging information from the repositories specified in nsswitch.conf(4), and verifies that the user's account and password have not expired.

The following options can be passed to the module:

debug

syslog(3C) debugging information at the LOG_DEBUG level

nowarn

Turn off warning messages

server_policy

If the account authority for the user, as specified by PAM_USER, is a server, do not apply the Unix policy from the passwd entry in the name service switch.

The following values are returned:

PAM_AUTHTOK_EXPIRED

Password expired and no longer usable

PAM_BUF_ERR

Memory buffer error

PAM_IGNORE

Ignore module, not participating in result

PAM_NEW_AUTHTOK_REQD

Obtain new authentication token from the user

PAM_SERVICE_ERR

Error in underlying service module

PAM_SUCCESS

Successfully obtains authentication token

See attributes(5) for descriptions of the following attributes:

pam(3PAM), pam_authenticate(3PAM), syslog(3C), libpam(3LIB), pam.conf(4), nsswitch.conf(4), attributes(5), pam_authtok_check(5), pam_authtok_get(5), pam_authtok_store(5), pam_dhkeys(5), pam_passwd_auth(5), pam_unix(5), pam_unix_auth(5), pam_unix_session(5)

The interfaces in libpam(3LIB) are MT-Safe only if each thread within the multi-threaded application uses its own PAM handle.

The pam_unix(5) module might not be supported in a future release. Similar functionality is provided by pam_authtok_check(5), pam_authtok_get(5), pam_authtok_store(5), pam_dhkeys(5), pam_passwd_auth(5), pam_unix_account(5), pam_unix_auth(5), and pam_unix_session(5).