There is sometimes need to check if user could authenticate (check if user account is not expired). For example in gitlab when user connects using key over ssh and we want to validate that user account tied to the key is still valid in our environment.
For this the second command pam_acct_mgmt in rpam_ext.c is used for authenticated user, but it would be nice to be able to call this function without password. Thus another method like rpam.valid(username) could be added.
There is sometimes need to check if user could authenticate (check if user account is not expired). For example in gitlab when user connects using key over ssh and we want to validate that user account tied to the key is still valid in our environment.
For this the second command
pam_acct_mgmtinrpam_ext.cis used for authenticated user, but it would be nice to be able to call this function without password. Thus another method likerpam.valid(username)could be added.