User info messages

To achieve a consistent user experience and to facilitate internationalization all messages show to the user are generate by the PAM client and not by the SSSD server components. More...

Enumerations
enum	user_info_type {   SSS_PAM_USER_INFO_OFFLINE_AUTH = 0x01 , SSS_PAM_USER_INFO_OFFLINE_AUTH_DELAYED , SSS_PAM_USER_INFO_OFFLINE_CHPASS , SSS_PAM_USER_INFO_OTP_CHPASS ,   SSS_PAM_USER_INFO_CHPASS_ERROR , SSS_PAM_USER_INFO_GRACE_LOGIN , SSS_PAM_USER_INFO_EXPIRE_WARN , SSS_PAM_USER_INFO_ACCOUNT_EXPIRED ,   SSS_PAM_USER_INFO_PIN_LOCKED , SSS_PAM_USER_INFO_NO_KRB_TGT }
	Different types of user messages. More...

Detailed Description

To achieve a consistent user experience and to facilitate internationalization all messages show to the user are generate by the PAM client and not by the SSSD server components.

To indicate what message the client should display to the user SSSD can send a SSS_PAM_USER_INFO message where the data part contains one of the following tags as an unsigned 32-bit integer value and optional data.

Examples:

• SSS_PAM_USER_INFO_OFFLINE_CHPASS

  uint32_t	uint32_t	uint32_t
  0x06	0x04	0x03

• SSS_PAM_USER_INFO_CHPASS_ERROR

  uint32_t	uint32_t	uint32_t	uint32_t	uint8_t[3]
  0x06	0x0B	0x04	0x03	abc

Enumeration Type Documentation

user_info_type

enum user_info_type

Different types of user messages.

Enumerator
SSS_PAM_USER_INFO_OFFLINE_AUTH	Inform the user that the authentication happened offline. This message is generated by the PAM responder. Parameters Time when the cached password will expire in seconds since the UNIX Epoch as returned by time(2) as int64_t. A value of zero indicates that the cached password will never expire.
SSS_PAM_USER_INFO_OFFLINE_AUTH_DELAYED	Tell the user how low a new authentication is delayed. This message is generated by the PAM responder. Parameters Time when an authentication is allowed again in seconds since the UNIX Epoch as returned by time(2) as int64_t.
SSS_PAM_USER_INFO_OFFLINE_CHPASS	Tell the user that it is not possible to change the password while the system is offline. This message is generated by the PAM responder.
SSS_PAM_USER_INFO_OTP_CHPASS	Tell the user that he needs to kinit or login and logout to get a TGT after an OTP password change.
SSS_PAM_USER_INFO_CHPASS_ERROR	Tell the user that a password change failed and optionally give a reason. Parameters Size of the message as unsigned 32-bit integer value. A value of 0 indicates that no message is following. String with the specified length.
SSS_PAM_USER_INFO_GRACE_LOGIN	Warn the user that the password is expired and inform about the remaining number of grace logins. Parameters The number of remaining grace logins as uint32_t
SSS_PAM_USER_INFO_EXPIRE_WARN	Warn the user that the password will expire soon. Parameters Number of seconds before the user's password will expire.
SSS_PAM_USER_INFO_ACCOUNT_EXPIRED	Tell the user that the account has expired and optionally give a reason. Parameters Size of the message as unsigned 32-bit integer value. A value of 0 indicates that no message is following. String with the specified length.
SSS_PAM_USER_INFO_PIN_LOCKED	Tell the user that the PIN is locked.
SSS_PAM_USER_INFO_NO_KRB_TGT	Tell the user that Kerberos local/offline auth was performed, therefore no TGT is granted.