canweriotnow / rpam-ruby19

PAM auth for Ruby - 1.9 compat version
https://rubygems.org/gems/rpam-ruby19
GNU General Public License v2.0
9 stars 5 forks source link

Ability to check if user account is not expired/invalid #6

Open raphendyr opened 10 years ago

raphendyr commented 10 years ago

There is sometimes need to check if user could authenticate (check if user account is not expired). For example in gitlab when user connects using key over ssh and we want to validate that user account tied to the key is still valid in our environment.

For this the second command pam_acct_mgmt in rpam_ext.c is used for authenticated user, but it would be nice to be able to call this function without password. Thus another method like rpam.valid(username) could be added.

canweriotnow commented 10 years ago

I'm not too active on this project anymore but if you'd like to send a pull request I'd be happy to consider it.