241 static int sshpam_err = 0;  variable
490 	sshpam_err = pam_get_item(sshpam_handle, PAM_USER,  in sshpam_thread()
492 	if (sshpam_err != PAM_SUCCESS)  in sshpam_thread()
516 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,  in sshpam_thread()
518 	if (sshpam_err != PAM_SUCCESS)  in sshpam_thread()
520 	sshpam_err = pam_authenticate(sshpam_handle, flags);  in sshpam_thread()
521 	if (sshpam_err == PAM_MAXTRIES)  in sshpam_thread()
523 	if (sshpam_err != PAM_SUCCESS)  in sshpam_thread()
527 		sshpam_err = PAM_ACCT_EXPIRED;  in sshpam_thread()
531 		sshpam_err = pam_chauthtok(sshpam_handle,  in sshpam_thread()
533 		if (sshpam_err != PAM_SUCCESS)  in sshpam_thread()
575 	ssh_msg_send(ctxt->pam_csock, sshpam_err, buffer);  in sshpam_thread()
581 	    pam_strerror(sshpam_handle, sshpam_err))) != 0)  in sshpam_thread()
584 	if (sshpam_err == PAM_ACCT_EXPIRED)  in sshpam_thread()
683 	pam_end(sshpam_handle, sshpam_err);  in sshpam_cleanup()
710 		sshpam_err = pam_get_item(sshpam_handle,  in sshpam_init()
712 		if (sshpam_err == PAM_SUCCESS && strcmp(user, pam_user) == 0)  in sshpam_init()
714 		pam_end(sshpam_handle, sshpam_err);  in sshpam_init()
719 	sshpam_err = pam_start(options.pam_service_name, user,  in sshpam_init()
723 	if (sshpam_err != PAM_SUCCESS) {  in sshpam_init()
724 		pam_end(sshpam_handle, sshpam_err);  in sshpam_init()
741 		sshpam_err = pam_set_item(sshpam_handle, PAM_RHOST,  in sshpam_init()
743 		if (sshpam_err != PAM_SUCCESS) {  in sshpam_init()
744 			pam_end(sshpam_handle, sshpam_err);  in sshpam_init()
768 	sshpam_err = pam_set_item(sshpam_handle, PAM_TTY, "ssh");  in sshpam_init()
769 	if (sshpam_err != PAM_SUCCESS) {  in sshpam_init()
770 		pam_end(sshpam_handle, sshpam_err);  in sshpam_init()
1090 	sshpam_err = pam_acct_mgmt(sshpam_handle, 0);  in do_pam_account()
1091 	debug3("PAM: %s pam_acct_mgmt = %d (%s)", __func__, sshpam_err,  in do_pam_account()
1092 	    pam_strerror(sshpam_handle, sshpam_err));  in do_pam_account()
1094 	if (sshpam_err != PAM_SUCCESS && sshpam_err != PAM_NEW_AUTHTOK_REQD) {  in do_pam_account()
1099 	if (sshpam_err == PAM_NEW_AUTHTOK_REQD)  in do_pam_account()
1109 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,  in do_pam_setcred()
1111 	if (sshpam_err != PAM_SUCCESS)  in do_pam_setcred()
1113 		    pam_strerror(sshpam_handle, sshpam_err));  in do_pam_setcred()
1115 	sshpam_err = pam_setcred(sshpam_handle, PAM_ESTABLISH_CRED);  in do_pam_setcred()
1116 	if (sshpam_err == PAM_SUCCESS) {  in do_pam_setcred()
1122 		    pam_strerror(sshpam_handle, sshpam_err));  in do_pam_setcred()
1125 		    pam_strerror(sshpam_handle, sshpam_err));  in do_pam_setcred()
1195 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,  in do_pam_chauthtok()
1197 	if (sshpam_err != PAM_SUCCESS)  in do_pam_chauthtok()
1199 		    pam_strerror(sshpam_handle, sshpam_err));  in do_pam_chauthtok()
1201 	sshpam_err = pam_chauthtok(sshpam_handle, PAM_CHANGE_EXPIRED_AUTHTOK);  in do_pam_chauthtok()
1202 	if (sshpam_err != PAM_SUCCESS)  in do_pam_chauthtok()
1204 		    pam_strerror(sshpam_handle, sshpam_err));  in do_pam_chauthtok()
1215 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,  in do_pam_session()
1217 	if (sshpam_err != PAM_SUCCESS)  in do_pam_session()
1219 		    pam_strerror(sshpam_handle, sshpam_err));  in do_pam_session()
1220 	sshpam_err = pam_open_session(sshpam_handle, 0);  in do_pam_session()
1221 	if (sshpam_err == PAM_SUCCESS)  in do_pam_session()
1227 		    pam_strerror(sshpam_handle, sshpam_err));  in do_pam_session()
1373 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,  in sshpam_auth_passwd()
1375 	if (sshpam_err != PAM_SUCCESS)  in sshpam_auth_passwd()
1377 		    pam_strerror(sshpam_handle, sshpam_err));  in sshpam_auth_passwd()
1381 	sshpam_err = pam_authenticate(sshpam_handle, flags);  in sshpam_auth_passwd()
1384 	if (sshpam_err == PAM_MAXTRIES)  in sshpam_auth_passwd()
1386 	if (sshpam_err == PAM_SUCCESS && authctxt->valid) {  in sshpam_auth_passwd()
1393 		    pam_strerror(sshpam_handle, sshpam_err));  in sshpam_auth_passwd()