Loadable Authentication Module Programming Interface

This overview explains the various interfaces for loadable authentication module programming:

Overview
The loadable authentication module interface provides a means for extending identification and authentication (I&A) for new technologies. The interface implements a set of well-defined functions for performing user and group account access and management.
Load Module Interfaces
Each loadable module defines a number of interface subroutines. The interface subroutines, which must be present, are determined by how the loadable module is to be used by the system.
Authentication Interfaces
Authentication interfaces perform password validation and modification.
Identification Interfaces
Identification interfaces perform user and group identity functions. The identification interfaces store and retrieve user and group identifiers and account information.
Support Interfaces
Support interfaces perform functions such as initiating and terminating access to the module, creating and deleting accounts, and serializing access to information.
Configuration Files
A stanza exists for each loadable module which is to be used by the system. Each stanza contains a number of attributes used to load and initialize the module.
Compound Load Modules
The security library is responsible for constructing a new method table to perform the compound function.

Parent topic: Kernel Extensions and Device Support Programming Concepts