Account Management Function: PAM_EXTERN int pam_sm_acct_mgmt(pam_handle_t* pamh, int flags, int argc, const char** argv); Macro used: PAM_SM_ACCOUNT The function checks if the user (that was already authenticated) may gain access at this time. It checks for limits by time of day, tty, remote host and so on. This function may also determine that the user's password has expired, and return a value specifying that the user must replace the password before the application continues its execution. Valid return values: PAM_ACCT_EXPIRED - the user is no longer permitted access to the system. PAM_AUTH_ERR - an authentication error has occured. PAM_AUTHTOKEN_REQD - the user's authentication token has expired, and must be replaced. PAM_USER_UNKNOWN - the module' authentication service does not know the supplied user.