Struct pam_kanidm::PamKanidm

pub struct PamKanidm;

Trait Implementations

impl PamHooks for PamKanidm

fn acct_mgmt(pamh: &PamHandle, args: Vec<&CStr>, _flags: PamFlag) -> PamResultCode

This function performs the task of establishing whether the user is permitted to gain access at this time. It should be understood that the user has previously been validated by an authentication module. This function checks for other things. Such things might be: the time of day or the date, the terminal line, remote hostname, etc. This function may also determine things like the expiration on passwords, and respond that the user change it before continuing.

fn sm_authenticate(
    pamh: &PamHandle,
    args: Vec<&CStr>,
    _flags: PamFlag
) -> PamResultCode

This function performs the task of authenticating the user.

fn sm_chauthtok(
    _pamh: &PamHandle,
    args: Vec<&CStr>,
    _flags: PamFlag
) -> PamResultCode

This function is used to (re-)set the authentication token of the user.

fn sm_close_session(
    _pamh: &PamHandle,
    args: Vec<&CStr>,
    _flags: PamFlag
) -> PamResultCode

This function is called to terminate a session.

fn sm_open_session(
    pamh: &PamHandle,
    args: Vec<&CStr>,
    _flags: PamFlag
) -> PamResultCode

This function is called to commence a session.

fn sm_setcred(
    _pamh: &PamHandle,
    args: Vec<&CStr>,
    _flags: PamFlag
) -> PamResultCode

This function performs the task of altering the credentials of the user with respect to the corresponding authorization scheme. Generally, an authentication module may have access to more information about a user than their authentication token. This function is used to make such information available to the application. It should only be called after the user has been authenticated but before a session has been established.