--hHWLQfXTYDoKhP50 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Tue, May 21, 2002 at 05:43:29PM +0530, Sridhar Bandi wrote: > what should be the error code that need to be returned by > pam_sm_authenticate() when the user's account is expired. > Should it return PAM_SUCCESS or PAM_ACCT_EXPIRED. > What I think is it shouldn't return PAM_ACCT_EXPIRED as > its pam_acct_mgmt() job to return this error. > Please clear my doubt , thanks in advance for all the help. That's correct. A PAM application is required to call pam_acct_mgmt() after a successful return from pam_authenticate(), so in theory it's ok to return PAM_SUCCESS from pam_authenticate(). Steve Langasek postmodern programmer --hHWLQfXTYDoKhP50 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE86lcoKN6ufymYLloRAuMuAJ4+VjoZSy0t+6L66jCTrPsU31cizwCglCV5 nXS7hPGOVZLqSqCTDG92aS8= =KVWu -----END PGP SIGNATURE----- --hHWLQfXTYDoKhP50--