NAME

pam_get_mapped_username - get valid matched identity in new domain

SYNOPSIS

#include <security/pam_appl.h>

int pam_get_mapped_username (
    pam_handle_t    *pamh,
    const char      *src_username,
    const char      *src_module_type,
    const char      *src_authn_domain,
    const char      *target_module_type,
    const char      *target_authn_domain,
    char           **target_module_username,
);

DESCRIPTION

The pam_get_mapped_username() function is used to obtain a valid identity in a new domain that matches the input identity. The target_module_type and target_authn_domain are used to query the mapping database and extract the target_username.

The arguments for pam_get_mapped_username() are:

pamh (in)

The PAM authentication handle, which has been returned from a previous call to pam_start().

src_username (in,out)

The source username used for the mapping. It this is NULL, then the value is obtained from the pam_hamdle.

src_module_type (in)

The source authentication type; for example, DCE.

src_authn_domain (in)

The source domain; for example, the DCE cell name.

target_module_type (in)

The target authentication type; for example, UNIX.

target_authn_domain (in)

The target domain; for example, UNIX hostname.

target_module_username (out)

The target username which matches the input src_username.

RETURN VALUE

One of the following PAM status codes shall be returned:

[PAM_SUCCESS]

Successful completion.

[PAM_USER_UNKNOWN]

The username supplied is not recognized.

[PAM_MODULE_UNKNOWN]

The mapping service does not support this module.

[PAM_DOMAIN_UNKNOWN]

The mapping service does not support this module's domain.

[PAM_SERVICE_ERR]

The mapping service failed in reading/writing data.

[PAM_PERM_DENIED]

The caller does not possess the required authority.

[PAM_OPEN_ERR]

Failure when dynamically loading a service module.

[PAM_SYMBOL_ERR]

Symbol not found.

[PAM_SYSTEM_ERR]

System error.

[PAM_BUF_ERR]

Memory buffer error.

[PAM_CONV_ERR]

Conversation error.

[??] Some characters or strings that appear in the printed document are not easily representable using HTML.