pam_sm_chauthtok(3)

pam_sm_chauthtok3

Service module implementation for pam_chauthtok

Usage

#include <sys/types.h>

#include <security/pam_appl.h>

#include <security/pam_modules.h>

int

pam_sm_chauthtok(pam_handle_t *pamh, int flags, int argc, const char **argv);

Overview

The pam_sm_chauthtok() function is the service module's implementation of the pam_chauthtok(3) API function.

When the application calls pam_chauthtok(3), the service function is called twice, first with the PAM_PRELIM_CHECK flag set and then again with the PAM_UPDATE_AUTHTOK flag set.

Return values

The pam_sm_chauthtok() function returns one of the following values:

[PAM_SUCCESS]

Success.

[PAM_ABORT]

General failure.

[PAM_AUTHTOK_DISABLE_AGING]

Authentication token aging disabled.

[PAM_AUTHTOK_ERR]

Authentication token failure.

[PAM_AUTHTOK_LOCK_BUSY]

Authentication token lock busy.

[PAM_AUTHTOK_RECOVERY_ERR]

Failed to recover old authentication token.

[PAM_BUF_ERR]

Memory buffer error.

[PAM_CONV_ERR]

Conversation failure.

[PAM_IGNORE]

Ignore this module.

[PAM_PERM_DENIED]

Permission denied.

[PAM_SERVICE_ERR]

Error in service module.

[PAM_SYSTEM_ERR]

System error.

[PAM_TRY_AGAIN]

Try again.

Releases

56 releases since FreeBSD 5.0-RELEASE; the text changed 15 times.

  1. 5.0
  2. 5.1
  3. 5.2–5.2.1
  4. 5.3–5.5
  5. 6.0–6.3
  6. 6.4
  7. 7.0
  8. 7.1–9.1
  9. 9.2
  10. 9.3–10.0
  11. 10.1–11.2
  12. 11.3–11.4
  13. 12.0–12.2
  14. 12.3–13.2
  15. 13.3–14.5
  16. 15.0–16.0

Standards

X/Open Single Sign-On Service (XSSO) - Pluggable Authentication Modules, June 1997.

Authors

The pam_sm_chauthtok() function and this manual page were developed for the FreeBSD Project by ThinkSec AS and Network Associates Laboratories, the Security Research Division of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 (“CBOSS”), as part of the DARPA CHATS research program.

The OpenPAM library is maintained by Dag-Erling Smørgrav ⟨[email protected]⟩.

From base 16.0-CURRENT-20261027-61c70dc16a79 in FreeBSD 16.0-CURRENT (2026-10-27). Parsed by carta from the page's mdoc source.