Linux Manuals session 3

pam_get_authtok, pam_get_authtok_verify, pam_get_authtok_noverify – get authentication token Synopsis #include <security/pam_ext.h> int pam_get_authtok(pam_handle_t *pamh, int item, const char **authtok, const char *prompt); int pam_get_authtok_noverify(pam_handle_t *pamh, const char **authtok, const char *prompt); int pam_get_authtok_verify(pam_handle_t *pamh, const char **authtok, const char *prompt); Description The pam_get_authtok function returns the cached authentication token, or prompts the user if no token…

pam_get_authtok, pam_get_authtok_verify, pam_get_authtok_noverify – get authentication token Synopsis #include <security/pam_ext.h> int pam_get_authtok(pam_handle_t *pamh, int item, const char **authtok, const char *prompt); int pam_get_authtok_noverify(pam_handle_t *pamh, const char **authtok, const char *prompt); int pam_get_authtok_verify(pam_handle_t *pamh, const char **authtok, const char *prompt); Description The pam_get_authtok function returns the cached authentication token, or prompts the user if no token…

pam_fail_delay – request a delay on failure Synopsis #include <security/pam_appl.h> int pam_fail_delay(pam_handle_t *pamh, unsigned int usec); Description The pam_fail_delay function provides a mechanism by which an application or module can suggest a minimum delay of usec micro-seconds. The function keeps a record of the longest time requested with this function. Should pam_authenticate(3) fail, the failing…

pam_error, pam_verror – display error messages to the user Synopsis #include <security/pam_ext.h> int pam_error(pam_handle_t *pamh, const char *fmt, …); int pam_verror(pam_handle_t *pamh, const char *fmt, va_list args); Description The pam_error function prints error messages through the conversation function to the user. The pam_verror function performs the same task as pam_error() with the difference that it…

pam_end – termination of PAM transaction Synopsis #include <security/pam_appl.h> int pam_end(pam_handle_t *pamh, int pam_status); Description The pam_end function terminates the PAM transaction and is the last function an application should call in the PAM context. Upon return the handle pamh is no longer valid and all memory associated with it will be invalid. The pam_status…

pam_conv – PAM conversation function Synopsis #include <security/pam_appl.h> struct pam_message { int msg_style; const char *msg; }; struct pam_response { char *resp; int resp_retcode; }; struct pam_conv { int (*conv)(int num_msg, const struct pam_message **msg, struct pam_response **resp, void *appdata_ptr); void *appdata_ptr; }; Description The PAM library uses an application-defined callback to allow a direct…

pam_close_session – terminate PAM session management Synopsis #include <security/pam_appl.h> int pam_close_session(pam_handle_t *pamh, int flags); Description The pam_close_session function is used to indicate that an authenticated session has ended. The session should have been created with a call to pam_open_session(3). It should be noted that the effective uid, geteuid(2). of the application should be of sufficient…

pam_chauthtok – updating authentication tokens Synopsis #include <security/pam_appl.h> int pam_chauthtok(pam_handle_t *pamh, int flags); Description The pam_chauthtok function is used to change the authentication token for a given user (as indicated by the state associated with the handle pamh). The pamh argument is an authentication handle obtained by a prior call to pam_start(). The flags argument…

pam_authenticate – account authentication Synopsis #include <security/pam_appl.h> int pam_authenticate(pam_handle_t *pamh, int flags); Description The pam_authenticate function is used to authenticate the user. The user is required to provide an authentication token depending upon the authentication service, usually this is a password, but could also be a finger print. The PAM service module may request that…

pam_acct_mgmt – PAM account validation management Synopsis #include <security/pam_appl.h> int pam_acct_mgmt(pam_handle_t *pamh, int flags); Description The pam_acct_mgmt function is used to determine if the users account is valid. It checks for authentication token and account expiration and verifies access restrictions. It is typically called after the user has been authenticated. The pamh argument is an…

pam – Pluggable Authentication Modules Library Synopsis #include <security/pam_appl.h> #include <security/pam_modules.h> #include <security/pam_ext.h> Description PAM is a system of libraries that handle the authentication tasks of applications (services) on the system. The library provides a stable general interface (Application Programming Interface – API) that privilege granting programs (such as login(1) and su(1)) defer to to…

palette_color – Maps palette indexes into the current pixel format colors. Allegro game programming library. Synopsis #include <allegro.h> extern int palette_color[256]; Description Table mapping palette index colors (0-255) into whatever pixel format is being used by the current display mode. In a 256-color mode this just maps onto the array index. In truecolor modes it…

page_rsa – RSA – public-key cryptography RSA is named by its inventors (Ron Rivest, Adi Shamir, and Leonard Adleman) (published in 1977), patented expired in 21 September 2000. Speed for RSA in seconds no key blinding 1000 iteration, same rsa keys (1024 and 2048) operation performed each eteration sign, verify, encrypt, decrypt on a random…

page_revoke – Revocation methods There are two revocation method for PKIX/X.509: CRL and OCSP. Revocation is needed if the private key is lost and stolen. Depending on how picky you are, you might want to make revocation for destroyed private keys too (smartcard broken), but that should not be a problem. CRL is a list…

page_rand – RAND – random number See the library functions here: RAND crypto functions

page_print – Hx509 printing functions See the library functions here: hx509 printing functions

page_peer – Hx509 crypto selecting functions Peer info structures are used togeter with hx509_crypto_select() to select the best avaible crypto algorithm to use. See the library functions here: hx509 certificate selecting functions

page_name – PKIX/X.509 Names There are several names in PKIX/X.509, GeneralName and Name. A Name consists of an ordered list of Relative Distinguished Names (RDN). Each RDN consists of an unordered list of typed strings. The types are defined by OID and have long and short description. For example id-at-commonName (2.5.4.3) have the long name…

page_lock – Locking and unlocking certificates and encrypted data. See the library functions here: hx509 lock functions

page_keyset – Certificate store operations Type of certificates store: • MEMORY In memory based format. Doesnt support storing. • FILE FILE supports raw DER certicates and PEM certicates. When PEM is used the file can contain may certificates and match private keys. Support storing the certificates. DER format only supports on certificate and no private…