NAME

pwdauthd − server for authenticating passwords

SYNOPSIS

/usr/etc/rpc.pwdauthd

AVAILABILITY

This program is available with the Security software installation option.  Refer to Installing the SunOS for information on how to install optional software. 

DESCRIPTION

pwdauthd is a server that determines authentication for users and groups.  It handles authentication requests from pwdauth(3) and grpauth.  Communication to and from pwdauthd is by means of RPC calls.  The server is passed a filename and a password. It returns an integer value that specifies whether the password is valid.  The possible return values are PWA_VALID if the name is valid, PWA_INVALID if the name is invalid, and PWA_UNKNOWN if validity cannot be determined because no adjunct files are present. 

If pwdauthd is serving pwdauth, it determines whether the passwd.adjunct file exists.  If not, it returns PWA_UNKNOWN. In this case, pwdauth knows to check the /etc/passwd file.  Otherwise, the server calls getpwanam (see getpwaent(3)) to get the entry for filename in either the local or the Yellow Pages file for passwd.adjunct.  If the encrypted password guess matches the encrypted password from the file, pwdauthd returns PWA_VALID. If the passwords do not match, it returns PWA_INVALID.

If pwdauthd is serving grpauth, it determines whether the group.adjunct file exists.  If not, it returns PWA_UNKNOWN. In this case, grpauth knows to check the /etc/group file.  Otherwise, the server calls getgranam (see getgraent(3)) to get the entry for filename in either the local or the Yellow Pages file for group.adjunct.  If the encrypted password guess matches the encrypted password from the file, pwdauthd returns PWA_VALID. If the passwords do not match, it returns PWA_INVALID.

SEE ALSO

getpwaent(3), getgraent(3), pwdauth(3)

Sun Release 4.0  —  Last change: 21 December 1987