summaryrefslogtreecommitdiffstats
path: root/lib/libpam/modules
diff options
context:
space:
mode:
authorcharnier <charnier@FreeBSD.org>1997-07-22 07:39:43 +0000
committercharnier <charnier@FreeBSD.org>1997-07-22 07:39:43 +0000
commitf14112b4c134a5852fee28531c399c2877a8ad5c (patch)
tree8ec7d2d10db2b5e4e0f361b4ce2ef0607902ba91 /lib/libpam/modules
parent651e4c77827af8a163183a41586f11242d15fd12 (diff)
downloadFreeBSD-src-f14112b4c134a5852fee28531c399c2877a8ad5c.zip
FreeBSD-src-f14112b4c134a5852fee28531c399c2877a8ad5c.tar.gz
= -> ==, strcpy -> strncpy from OpenBSD.
update man page. Add usage(). Obtained from: OpenBSD
Diffstat (limited to 'lib/libpam/modules')
-rw-r--r--lib/libpam/modules/pam_kerberosIV/klogin.c2
-rw-r--r--lib/libpam/modules/pam_login_access/login.access.514
2 files changed, 8 insertions, 8 deletions
diff --git a/lib/libpam/modules/pam_kerberosIV/klogin.c b/lib/libpam/modules/pam_kerberosIV/klogin.c
index 4263786..6e30949 100644
--- a/lib/libpam/modules/pam_kerberosIV/klogin.c
+++ b/lib/libpam/modules/pam_kerberosIV/klogin.c
@@ -184,7 +184,7 @@ klogin(pw, instance, localhost, password)
}
/* undecipherable: probably didn't have a srvtab on the local host */
- if (kerror = RD_AP_UNDEC) {
+ if (kerror == RD_AP_UNDEC) {
syslog(LOG_NOTICE, "krb_rd_req: (%s)\n", krb_err_txt[kerror]);
dest_tkt();
return (1);
diff --git a/lib/libpam/modules/pam_login_access/login.access.5 b/lib/libpam/modules/pam_login_access/login.access.5
index 201c185..80c9afa 100644
--- a/lib/libpam/modules/pam_login_access/login.access.5
+++ b/lib/libpam/modules/pam_login_access/login.access.5
@@ -4,15 +4,15 @@
.Os FreeBSD 1.2
.Sh NAME
.Nm login.access
-.Nd Login access control table
+.Nd login access control table
.Sh DESCRIPTION
The
-.Nm login.access
+.Nm
file specifies (user, host) combinations and/or (user, tty)
combinations for which a login will be either accepted or refused.
.Pp
When someone logs in, the
-.Nm login.access
+.Nm
is scanned for the first entry that
matches the (user, host) combination, or, in case of non-networked
logins, the first entry that matches the (user, tty) combination. The
@@ -21,7 +21,7 @@ be accepted or refused.
.Pp
Each line of the login access control table has three fields separated by a
":" character: permission : users : origins
-
+.Pp
The first field should be a "+" (access granted) or "-" (access denied)
character. The second field should be a list of one or more login names,
group names, or ALL (always matches). The third field should be a list
@@ -30,9 +30,9 @@ names (begin with "."), host addresses, internet network numbers (end
with "."), ALL (always matches) or LOCAL (matches any string that does
not contain a "." character). If you run NIS you can use @netgroupname
in host or user patterns.
-
+.Pp
The EXCEPT operator makes it possible to write very compact rules.
-
+.Pp
The group file is searched only when a name does not match that of the
logged-in user. Only groups are matched in which users are explicitly
listed: the program does not look at a user's primary group id value.
@@ -40,7 +40,7 @@ listed: the program does not look at a user's primary group id value.
.Bl -tag -width /etc/login.access -compact
.It Pa /etc/login.access
The
-.Nm login.access
+.Nm
file resides in
.Pa /etc .
.El
OpenPOWER on IntegriCloud