The Linux Manuals (man pages) document is an important part of Linux documents. Linux Manuals are organized as several sections. Each section has a group of commands for a specific area in Linux usage, administration or development.
pam_getenvlist – getting the PAM environment Synopsis #include <security/pam_appl.h> char **pam_getenvlist(pam_handle_t *pamh); Description The pam_getenvlist function returns a complete copy of the PAM environment as associated with the handle pamh. The PAM environment variables represent the contents of the regular environment variables of the authenticated user when service is granted. The format of the memory…
pam_getenv – get a PAM environment variable Synopsis #include <security/pam_appl.h> const char *pam_getenv(pam_handle_t *pamh, const char *name); Description The pam_getenv function searches the PAM environment list as associated with the handle pamh for an item that matches the string pointed to by name and returns a pointer to the value of the environment variable. The…
pam_get_user – get user name Synopsis #include <security/pam_modules.h> int pam_get_user(const pam_handle_t *pamh, const char **user, const char *prompt); Description The pam_get_user function returns the name of the user specified by pam_start(3). If no user was specified it what pam_get_item (pamh, PAM_USER, … ); would have returned. If this is NULL it obtains the username via…
pam_get_item – getting PAM informations Synopsis #include <security/pam_modules.h> int pam_get_item(const pam_handle_t *pamh, int item_type, const void **item); Description The pam_get_item function allows applications and PAM service modules to access and retrieve PAM informations of item_type. Upon successful return, item contains a pointer to the value of the corresponding item. Note, this is a pointer to…
pam_get_data – get module internal data Synopsis #include <security/pam_modules.h> int pam_get_data(const pam_handle_t *pamh, const char *module_data_name, const void **data); Description This function together with the pam_set_data(3) function is useful to manage module-specific data meaningful only to the calling PAM module. The pam_get_data function looks up the object associated with the (hopefully) unique string module_data_name in…
pam_get_authtok, pam_get_authtok_verify, pam_get_authtok_noverify – get authentication token Synopsis #include <security/pam_ext.h> int pam_get_authtok(pam_handle_t *pamh, int item, const char **authtok, const char *prompt); int pam_get_authtok_noverify(pam_handle_t *pamh, const char **authtok, const char *prompt); int pam_get_authtok_verify(pam_handle_t *pamh, const char **authtok, const char *prompt); Description The pam_get_authtok function returns the cached authentication token, or prompts the user if no token…
pam_get_authtok, pam_get_authtok_verify, pam_get_authtok_noverify – get authentication token Synopsis #include <security/pam_ext.h> int pam_get_authtok(pam_handle_t *pamh, int item, const char **authtok, const char *prompt); int pam_get_authtok_noverify(pam_handle_t *pamh, const char **authtok, const char *prompt); int pam_get_authtok_verify(pam_handle_t *pamh, const char **authtok, const char *prompt); Description The pam_get_authtok function returns the cached authentication token, or prompts the user if no token…
pam_get_authtok, pam_get_authtok_verify, pam_get_authtok_noverify – get authentication token Synopsis #include <security/pam_ext.h> int pam_get_authtok(pam_handle_t *pamh, int item, const char **authtok, const char *prompt); int pam_get_authtok_noverify(pam_handle_t *pamh, const char **authtok, const char *prompt); int pam_get_authtok_verify(pam_handle_t *pamh, const char **authtok, const char *prompt); Description The pam_get_authtok function returns the cached authentication token, or prompts the user if no token…
pam_fail_delay – request a delay on failure Synopsis #include <security/pam_appl.h> int pam_fail_delay(pam_handle_t *pamh, unsigned int usec); Description The pam_fail_delay function provides a mechanism by which an application or module can suggest a minimum delay of usec micro-seconds. The function keeps a record of the longest time requested with this function. Should pam_authenticate(3) fail, the failing…
pam_error, pam_verror – display error messages to the user Synopsis #include <security/pam_ext.h> int pam_error(pam_handle_t *pamh, const char *fmt, …); int pam_verror(pam_handle_t *pamh, const char *fmt, va_list args); Description The pam_error function prints error messages through the conversation function to the user. The pam_verror function performs the same task as pam_error() with the difference that it…
pam_end – termination of PAM transaction Synopsis #include <security/pam_appl.h> int pam_end(pam_handle_t *pamh, int pam_status); Description The pam_end function terminates the PAM transaction and is the last function an application should call in the PAM context. Upon return the handle pamh is no longer valid and all memory associated with it will be invalid. The pam_status…
pam_conv – PAM conversation function Synopsis #include <security/pam_appl.h> struct pam_message { int msg_style; const char *msg; }; struct pam_response { char *resp; int resp_retcode; }; struct pam_conv { int (*conv)(int num_msg, const struct pam_message **msg, struct pam_response **resp, void *appdata_ptr); void *appdata_ptr; }; Description The PAM library uses an application-defined callback to allow a direct…
pam_close_session – terminate PAM session management Synopsis #include <security/pam_appl.h> int pam_close_session(pam_handle_t *pamh, int flags); Description The pam_close_session function is used to indicate that an authenticated session has ended. The session should have been created with a call to pam_open_session(3). It should be noted that the effective uid, geteuid(2). of the application should be of sufficient…
pam_chauthtok – updating authentication tokens Synopsis #include <security/pam_appl.h> int pam_chauthtok(pam_handle_t *pamh, int flags); Description The pam_chauthtok function is used to change the authentication token for a given user (as indicated by the state associated with the handle pamh). The pamh argument is an authentication handle obtained by a prior call to pam_start(). The flags argument…
pam_authenticate – account authentication Synopsis #include <security/pam_appl.h> int pam_authenticate(pam_handle_t *pamh, int flags); Description The pam_authenticate function is used to authenticate the user. The user is required to provide an authentication token depending upon the authentication service, usually this is a password, but could also be a finger print. The PAM service module may request that…
pam_acct_mgmt – PAM account validation management Synopsis #include <security/pam_appl.h> int pam_acct_mgmt(pam_handle_t *pamh, int flags); Description The pam_acct_mgmt function is used to determine if the users account is valid. It checks for authentication token and account expiration and verifies access restrictions. It is typically called after the user has been authenticated. The pamh argument is an…
pam – Pluggable Authentication Modules Library Synopsis #include <security/pam_appl.h> #include <security/pam_modules.h> #include <security/pam_ext.h> Description PAM is a system of libraries that handle the authentication tasks of applications (services) on the system. The library provides a stable general interface (Application Programming Interface – API) that privilege granting programs (such as login(1) and su(1)) defer to to…
palette_color – Maps palette indexes into the current pixel format colors. Allegro game programming library. Synopsis #include <allegro.h> extern int palette_color[256]; Description Table mapping palette index colors (0-255) into whatever pixel format is being used by the current display mode. In a 256-color mode this just maps onto the array index. In truecolor modes it…
page_rsa – RSA – public-key cryptography RSA is named by its inventors (Ron Rivest, Adi Shamir, and Leonard Adleman) (published in 1977), patented expired in 21 September 2000. Speed for RSA in seconds no key blinding 1000 iteration, same rsa keys (1024 and 2048) operation performed each eteration sign, verify, encrypt, decrypt on a random…
page_revoke – Revocation methods There are two revocation method for PKIX/X.509: CRL and OCSP. Revocation is needed if the private key is lost and stolen. Depending on how picky you are, you might want to make revocation for destroyed private keys too (smartcard broken), but that should not be a problem. CRL is a list…