summaryrefslogtreecommitdiffstats
path: root/doc/man/pam_set_data.3.xml
blob: c20068c64c406247b7e42debb8cc4546dfbdfc98 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.1.2//EN"
                   "http://www.oasis-open.org/docbook/xml/4.1.2/docbookx.dtd">

<refentry id='pam_set_data'>

  <refmeta>
    <refentrytitle>pam_set_data</refentrytitle>
    <manvolnum>3</manvolnum>
    <refmiscinfo class='setdesc'>Linux-PAM Manual</refmiscinfo>
  </refmeta>

  <refnamediv id='pam_set_data-name'>
    <refname>pam_set_data</refname>
    <refpurpose>
       set module internal data
    </refpurpose>
  </refnamediv>


<!-- body begins here -->

  <refsynopsisdiv>

   <funcsynopsis id="pam_set_data-synopsis">
     <funcsynopsisinfo>#include &lt;security/pam_modules.h&gt;</funcsynopsisinfo>
     <funcprototype>
       <funcdef>int <function>pam_set_data</function></funcdef>
       <paramdef>pam_handle_t *<parameter>pamh</parameter></paramdef>
       <paramdef>const char *<parameter>module_data_name</parameter></paramdef>
       <paramdef>void *<parameter>data</parameter></paramdef>
       <paramdef>void <parameter>(*cleanup)(pam_handle_t *pamh, void *data, int error_status)</parameter></paramdef>
     </funcprototype>
   </funcsynopsis>

  </refsynopsisdiv>


  <refsect1 id="pam_set_data-description">
    <title>DESCRIPTION</title>
    <para>
      The <function>pam_set_data</function> function associates a pointer
      to an object with the (hopefully) unique string
      <emphasis>module_data_name</emphasis> in the PAM context specified
      by the <emphasis>pamh</emphasis> argument.
    </para>

    <para>
      PAM modules may be dynamically loadable objects. In general such files
      should not contain <emphasis>static</emphasis> variables. This function
      and its counterpart
      <citerefentry>
        <refentrytitle>pam_get_data</refentrytitle><manvolnum>3</manvolnum>
      </citerefentry>,
      provide a mechanism for a module to associate some data with
      the handle <emphasis>pamh</emphasis>. Typically a module will call the
      <function>pam_set_data</function> function to register some data
       under a (hopefully) unique <emphasis>module_data_name</emphasis>.
       The data is available for use by other modules too but
       <emphasis>not</emphasis> by an application. Since this functions
       stores only a pointer to the <emphasis>data</emphasis>, the module
       should not modify or free the content of it.
    </para>

    <para>
      The function <function>cleanup()</function> is associated with the
      <emphasis>data</emphasis> and, if non-NULL, it is called when this
      data is over-written or following a call to
      <citerefentry>
        <refentrytitle>pam_end</refentrytitle><manvolnum>3</manvolnum>
      </citerefentry>.
    </para>

    <para>
      The <emphasis>error_status</emphasis> argument is used to indicate
      to the module the sort of action it is to take in cleaning this data
      item. As an example, Kerberos creates a ticket file during the
      authentication phase, this file might be associated with a data item.
      When
      <citerefentry>
        <refentrytitle>pam_end</refentrytitle><manvolnum>3</manvolnum>
      </citerefentry>
      is called by the module, the <emphasis>error_status</emphasis>
      carries the return value of the
      <citerefentry>
        <refentrytitle>pam_authenticate</refentrytitle><manvolnum>3</manvolnum>
      </citerefentry>
     or other <emphasis>libpam</emphasis> function as appropriate. Based
     on this value the Kerberos module may choose to delete the ticket file
     (<emphasis>authentication failure</emphasis>) or leave it in place.
   </para>

   <para>
     The <emphasis>error_status</emphasis> may have been logically
     OR'd with either of the following two values:
   </para>

    <variablelist>
      <varlistentry>
        <term>PAM_DATA_REPLACE</term>
        <listitem>
          <para>
            When a data item is being replaced (through a second call to
            <function>pam_set_data</function>) this mask is used.
            Otherwise, the call is assumed to be from
            <citerefentry>
              <refentrytitle>pam_end</refentrytitle><manvolnum>3</manvolnum>
            </citerefentry>.
          </para>
        </listitem>
      </varlistentry>

      <varlistentry>
        <term>PAM_DATA_SILENT</term>
        <listitem>
          <para>
            Which indicates that the process would prefer to perform the
            <function>cleanup()</function> quietly. That is, discourages
            logging/messages to the user.
          </para>
        </listitem>
      </varlistentry>
    </variablelist>
  </refsect1>

  <refsect1 id="pam_set_data-return_values">
    <title>RETURN VALUES</title>
    <variablelist>
      <varlistentry>
        <term>PAM_BUF_ERR</term>
        <listitem>
           <para>
              Memory buffer error.
          </para>
        </listitem>
      </varlistentry>
      <varlistentry>
        <term>PAM_SUCCESS</term>
        <listitem>
           <para>
             Data was successful stored.
          </para>
        </listitem>
      </varlistentry>
      <varlistentry>
        <term>PAM_SYSTEM_ERR</term>
        <listitem>
           <para>
             A NULL pointer was submitted as PAM handle or the
             function was called by an application.
          </para>
        </listitem>
      </varlistentry>
    </variablelist>
  </refsect1>

  <refsect1 id="pam_set_data-see_also">
    <title>SEE ALSO</title>
    <para>
      <citerefentry>
        <refentrytitle>pam_end</refentrytitle><manvolnum>3</manvolnum>
      </citerefentry>,
      <citerefentry>
        <refentrytitle>pam_get_data</refentrytitle><manvolnum>3</manvolnum>
      </citerefentry>,
      <citerefentry>
        <refentrytitle>pam_strerror</refentrytitle><manvolnum>3</manvolnum>
      </citerefentry>
    </para>
  </refsect1>

</refentry>