Diffstat (limited to 'doc/man/pam_setcred.3')
1 files changed, 67 insertions, 72 deletions
diff --git a/doc/man/pam_setcred.3 b/doc/man/pam_setcred.3
index 8c00fe71..22c728fb 100644
@@ -1,79 +1,74 @@
-.\" Hey Emacs! This file is -*- nroff -*- source.
-.\" Copyright (c) Andrew G. Morgan 1996,1997 <firstname.lastname@example.org>
-.TH PAM_SETCRED 3 "1997 July 6" "Linux-PAM 0.58" "App. Programmers' Manual"
-pam_setcred \- set the credentials for the user
-.B #include <security/pam_appl.h>
-.BI "int pam_setcred(pam_handle_t " *pamh ", int " flags ");"
-This function is used to establish, maintain and delete the
-credentials of a user. It should be called after a user has been
-authenticated and before a session is opened for the user (with
-.BR pam_open_session "(3))."
-It should be noted that credentials come in many forms. Examples
-include: group memberships; ticket-files; and Linux-PAM environment
-variables. For this reason, it is important that the basic identity
-of the user is established, by the application, prior to a call to
-this function. For example, the default
-environment variables should be set and also
-.BR initgroups "(2) "
+.\" ** You probably do not want to edit this file directly **
+.\" It was generated using the DocBook XSL Stylesheets (version 1.69.1).
+.\" Instead of manually editing it, you probably should edit the DocBook XML
+.\" source for it and then use the DocBook XSL Stylesheets to regenerate it.
+.TH "PAM_SETCRED" "3" "02/12/2006" "Linux\-PAM Manual" "Linux\-PAM Manual"
+.\" disable hyphenation
+.\" disable justification (adjust text to left margin only)
+pam_setcred \- establish / delete user credentials
+\fBint\ \fBpam_setcred\fR\fR\fB(\fR\fBpam_handle_t\ *\fR\fB\fIpamh\fR\fR\fB, \fR\fBint\ \fR\fB\fIflags\fR\fR\fB);\fR
+function is used to establish, maintain and delete the credentials of a user. It should be called after a user has been authenticated and before a session is opened for the user (with
+A credential is something that the user possesses. It is some property, such as a
+ticket, or a supplementary group membership that make up the uniqueness of a given user. On a Linux system the user's
+\fIGID\fR's are credentials too. However, it has been decided that these properties (along with the default supplementary groups of which the user is a member) are credentials that should be set directly by the application and not by PAM. Such credentials should be established, by the application, prior to a call to this function. For example,
(or equivalent) should have been performed.
-.SH "VALID FLAGS"
+\fIflags\fR, any one of which, may be logically OR'd with
-initialize the credentials for the user.
+Initialize the credentials for the user.
-delete the user's credentials.
+Delete the user's credentials.
-delete and then initialize the user's credentials.
+Fully reinitialize the user's credentials.
-extend the lifetime of the existing credentials.
+Extend the lifetime of the existing credentials.
.SH "RETURN VALUE"
-is returned, all other return values should be treated as errors.
-May be translated to text with
-.BR pam_strerror "(3). "
-.SH "CONFORMING TO"
-DCE-RFC 86.0, October 1995.
+Memory buffer error.
+Failed to set user credentials.
+User credentials are expired.
+Failed to retrieve user credentials.
+Data was successful stored.
+A NULL pointer was submitted as PAM handle, the function was called by a module or another system error occured.
+User is not known to an authentication module.
.SH "SEE ALSO"
-.BR pam_authenticate "(3), "
-.BR pam_strerror "(3)"
-.BR pam_open_session "(3). "
-Also, see the three
-.BR "System administrators" ", "
-.BR "module developers" ", "
-.BR "application developers" ". "