summaryrefslogtreecommitdiffstats
path: root/lib/libpam/modules/pam_unix
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix world breakage introduced by my recent modifications tocjc2002-03-182-2/+3
| | | | | | | chpass(8). The relations between libc, libpam, chpass, passwd, and vipw are a mess and probably should be cleaned up. Submitted by: Peter Pentchev <roam@ringlet.net>
* NAI DBA update.des2002-03-142-2/+2
|
* Remove the use of random(3), and encapsulate the salt-generation inmarkm2002-03-141-30/+33
| | | | | | | its own function. The use of arc4random(3) is hopeless overkill here, but that does not hurt anything. Requested by: ache
* Don't ignore system CFLAGS.sobomax2002-03-071-1/+1
|
* Switch to OpenPAM. Bump library version. Modules are now versioned, sodes2002-03-052-44/+37
| | | | | | | | | applications linked with Linux-PAM will still work. Remove pam_get_pass(); OpenPAM has pam_get_authtok(). Remove pam_prompt(); OpenPAM has pam_{,v}{error,info,prompt}(). Remove pam_set_item(3) man page as OpenPAM has its own. Sponsored by: DARPA, NAI Labs
* This file needs <syslog.h>.des2002-02-091-0/+1
| | | | Sponsored by: DARPA, NAI Labs
* Remove NO_WERROR, now that WARNS=n is gone.markm2002-02-061-1/+0
|
* #include cleanup.des2002-02-051-2/+2
| | | | Sponsored by: DARPA, NAI Labs
* Add the other half of the salt-generating code. No functionalmarkm2002-02-041-8/+7
| | | | | difference except that the salt is slightly harder to build dictionaries against, and the code does not use srandom[dev]().
* WARNS=n fixes (and some stylistic issues).markm2002-02-031-25/+27
|
* With asbestos longjohns on, integrate most of the checks normally done bydes2002-01-301-32/+102
| | | | | | login(1) (password & account expiry, hosts.access etc.) into pam_unix(8). Sponsored by: DARPA, NAI Labs
* WARNS=4 fixes. Protect with NO_WERROR for the modules that havemarkm2002-01-241-0/+1
| | | | warnings that are hard to fix or that I've been asked to leave alone.
* Back out recent changesache2002-01-191-12/+12
|
* Back out second right-now-expired password check in pam_sm_chauthtok,ache2002-01-191-2/+1
| | | | old expired password assumed there
* Add yet one expired-right-now password check, in pam_sm_chauthtokache2002-01-191-13/+12
| | | | | srandomdev() can't be used in libraries, replace srandomdev()+random() by arc4random()
* Add missing check for right-now-expired passwordache2002-01-191-0/+2
|
* mdoc(7) police: sort xrefs.ru2001-12-081-5/+5
|
* Document the local_pass and nis_pass options, add a few xrefs, and reorderdes2001-11-271-5/+29
| | | | | | the SEE ALSO section. License modified with original author's permission. Sponsored by: DARPA, NAI Labs
* Don't put an extra space after password prompts, because it violates POLA,sobomax2001-10-251-4/+4
| | | | | | makes FreeBSD inconsistent with previous releases and "other unices" as well as with some internal password-asking services (e.g. ftp) within the same release.
* Add __FBSDID()s to libpamdillon2001-09-301-2/+3
|
* Big module makeover; improve logging, standardise variable names,markm2001-08-263-22/+537
| | | | | introduce ability to change passwords for both "usual" Unix methods and NIS.
* Fix a couple of cross-references to reflect the reality of the module.markm2001-08-151-2/+2
|
* mdoc(7) police: -xwidth has been fold into -width.ru2001-07-131-3/+3
|
* mdoc(7) police: fixed markup, a little bit.ru2001-07-111-8/+8
|
* Clean up (and in some cases write) the PAM mudules, usingmarkm2001-07-093-33/+222
| | | | | | | | | | o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
* Big module cleanup.markm2001-06-041-9/+2
| | | | | | | | | | | Move common stuff into Makefile.inc, and tidy up all the Makefiles as a result. Build new modules. Put a commented-out dependancy on libpam for the (shared) modules. I can't bring this in just yet, as the dependancy (modules->libpam) is reversed for the static case (libpam->modules).
* Add the "nullok" option that causes this module to succeed if the Unixmarkm2001-06-041-3/+11
| | | | password is empty/null.
* Add the "auth_as_self" option to the pam_unix module (there is nomarkm2001-05-241-3/+8
| | | | | | | reason not to add it to others later). This causes the pam_unix module to check the user's _own_ password, not the password of the account that the user is authenticating into. This will allow eg: WHEELSU type behaviour from su(1).
* Use a unified libgcc rather than a seperate one for threaded andobrien2001-01-061-2/+2
| | | | | | | | non-threaded programs. This provides threaded programs with the needed exception frame symbols. parts submitted by: Max Khon <fjoe@iclub.nsu.ru> PR: 23252
* Add libcrypt. This previously/coincidentally worked for login,markm1999-09-301-2/+2
| | | | | because login was already linked against it, but others have a problem.
* Revive the pam_deny and pam_permit modules from Linux-PAM. They arejdp1999-05-082-2/+76
| | | | | | | | | | simple enough to be trusted. Add account management functionality to the pam_unix module. These changes should make it possible to use PAM in some ports. Submitted by: Max Khon <fjoe@iclub.nsu.ru>
* Fix bug that prevented accounts with empty passwords from loggingjdp1999-04-061-1/+1
| | | | | | in. Submitted by: Paul Traina <pst@juniper.net>
* Make it possible to use PAM in statically-linked applications.jdp1999-01-202-7/+8
|
* Build structure for contribified Linux-PAM, plus some home-grownjdp1998-11-182-0/+129
modules for FreeBSD's standard authentication methods. Although the Linux-PAM modules are present in the contrib tree, we don't use any of them. The main library "libpam" is composed of sources taken from three places. First are the standard Linux-PAM libpam sources from the contrib tree. Second are the Linux-PAM "libpam_misc" sources, also from the contrib tree. In Linux these form a separate library. But as Mike Smith pointed out to me, that seems pointless, so I have combined them into the libpam library. Third are some additional sources from the "src/lib/libpam" tree with some common functions that make it easier to write modules. Those I wrote myself. This work has been donated to FreeBSD by Juniper Networks, Inc.
OpenPOWER on IntegriCloud