Per the example program at http://www.linux-pam.org/Linux-PAM-html/adg-example.html
the authenticate() method should call pam_acct_mgmt() after calling pam_authenticate() [and before calling pam_setcred()].
Without this call, an account could be expired and still be successfully authenticated.
Per the example program at http://www.linux-pam.org/Linux-PAM-html/adg-example.html
the authenticate() method should call pam_acct_mgmt() after calling pam_authenticate() [and before calling pam_setcred()].
Without this call, an account could be expired and still be successfully authenticated.