Function auth_getstate 

pub unsafe extern "C" fn auth_getstate(
    _as: *mut auth_session_t,
) -> c_int

Get the full state of the session

From auth_subr(3):

In addtion to the values for `auth_close()`, it also may contain the bits:

AUTH_SILENT     Do not report an error, the user was not authenticated for access and was
                not expected to be. This is returned by login scripts that allow changing
                of the user's password, for instance. This value is stripped off for normal
                returns.

AUTH_CHALLENGE  The user was not authenticated for access and a challenge was issued. The
                challenge should be displayed to the user, a response received, and the
                result verified. This value is stripped off for normal returns.

AUTH_EXPIRED    The user's account has expired.

AUTH_PWEXPIRED  The user's password has expired and needs to be changed.