PAM_GET_ITEMS(8)                                              PAM_GET_ITEMS(8)

NAME
       pam_get_items - A PAM test module to retrieve module-specific PAM items

SYNOPSIS
       pam_get_items.so

DESCRIPTION
       PAM modules store data in PAM items. These items are only accessible
       from module context, not application context as they might include
       private data (PAM_AUTHTOK normally contains the password). But when
       testing PAM modules, it's often nice to make sure a PAM module under
       test sets items for the next module the way it's supposed to. The
       pam_get_items module makes this possible by exporting all PAM items as
       environment variables using pam_putenv. The environment variable name
       is the same as the constant name of the PAM item.

OPTIONS
       None

MODULE TYPES PROVIDED
       All module types (account, auth, password and session) are provided.

EXAMPLE
       Consider an example that tests that pam_unix puts the password it reads
       onto PAM stack. The test service file would contain:

           auth required        pam_unix.so
           auth required        pam_get_items.so

       Then the test would run the PAM conversation and afterwards call:

           pam_getenv(pamh, "PAM_AUTHTOK");

       To retrieve the password.

                                  2015-11-04                  PAM_GET_ITEMS(8)