NAME

sia_chg_finger, sia_chg_password, sia_chg_shell − SIA change routines (Security Integration Architecture)

LIBRARY

Standard C library (libc.so and libc.a)

SYNOPSIS

#include <sia.h>
#include <siad.h>

int sia_chg_finger(
int (∗collect)(),
char ∗username,
int argc,
char ∗argv[]);

int sia_chg_password(
int (∗collect)(),
char ∗username,
int argc,
char ∗argv[]);

int sia_chg_shell(
int (∗collect)(),
char ∗username,
int argc,
char ∗argv[]);

PARAMETERS

collectThe collect parameter is a pointer to an SIA collection routine.  If this pointer is NULL, no collection is possible.  The collect parameter should never be NULL.  This parameter is read only. 

Further information on the SIA change routines is available from the interface specifications in /usr/include/{sia,siad}.h. 

usernameThe username parameter is used when a precollected username is available.  The username parameter either points to the precollected username or is set to NULL if no username exists.  This parameter is read only. 

argcThe argc parameter is the number of arguments used when invoking the calling command or utility.  This parameter are read only. 

argvThe argv parameter is the array of arguments used when invoking the calling command or utility.  The argv[0] variable must always be set to the calling commands name.  This is used for logging or auditing of the password change function. 

DESCRIPTION

sia_chg_finger()

The sia_chg_finger() routine is used to change information about users in the /etc/passwd file.  This information is used by the finger program, among others.  The user is offered a menu to choose which security mechanism is  relevant to this invocation. If only one choice is available that security mechanism is called directly. 

sia_chg_password()

The sia_chg_password() routine is used to change the password in the security mechanism’s database; for base security, its /etc/passwd and for enhanced security its auth.db.  If NIS is running, the password change is made in /var/yp/src/passwd or /var/yp/src/prpasswd files. 

The routine assumes that the user might be registered with multiple security mechanisms and that those security mechanisms do not support a common distributed transaction update capability. Consequently the sia_chg_password() routine first calls the siad_chk_user() security dependent routine to obtain a list of relevant security mechanisms to offer to the calling user.  The user is offered a menu to choose which security mechanism is  relevant to this invocation of password change. If only one choice is available that security mechanism is called directly. 

sia_chg_shell()

The sia_chg_shell() routine is used to change the login shell field of the /etc/passwd file.  The user is offered a menu to choose which security mechanism is  relevant. If only one choice is available that security mechanism is called directly. 

RETURN VALUES

The sia_chg_∗() routines return SIASUCCESS when the are successful and SIAFAIL when they are not successful. 

ERRORS

The errno value is not (normally) set explicitly by sia_∗ routines.  The errno values are those returned from the dynamic loader interface, from dependent (siad_∗) routines, or from malloc.  Possible errors include resource constraints (no memory) and various authentication failures. 

FILES

/etc/passwd

/etc/sia/matrix.conf

RELATED INFORMATION

 chfn(1), chsh(1), passwd(1)
siad_chg_finger(3), matrix.conf(4)

Security