summaryrefslogtreecommitdiffstats
path: root/lib/libpam/modules/pam_unix
Commit message (Collapse)AuthorAgeFilesLines
...
* Use libutil and libypclnt for all passwd manipulation and NIS needs.des2002-05-082-22/+41
| | | | Sponsored by: DARPA, NAI Labs
* Don't ask root for the old password, except in the NIS case.des2002-04-261-1/+6
| | | | Sponsored by: DARPA, NAI Labs
* Fix a really dumb bug (missing curly braces around the body of an ifdes2002-04-261-2/+3
| | | | statement) that caused pam_sm_chauthtok() to always fail silently.
* Revert previous commit, it is incorrect.des2002-04-151-1/+1
|
* Properly spell rpcsvc/ypclnt.h and fix the build.obrien2002-04-151-1/+1
|
* Prompt for new password during update phase, not during preliminary phase.des2002-04-151-16/+10
| | | | Sponsored by: DARPA, NAI Labs
* Dike out most of the NIS code and replace it with calls to libypclnt.des2002-04-152-285/+79
| | | | | | | Rework pam_sm_chauthtok() so it (mostly?) works. The standard pw stuff still needs to move into a library somewhere. Sponsored by: DARPA, NAI Labs
* Major cleanup:des2002-04-121-67/+36
| | | | | | | | | | | | | - add __unused where appropriate - PAM_RETURN -> return since OpenPAM already logs the return value. - make PAM_LOG use openpam_log() - make PAM_VERBOSE_ERROR use openpam_get_option() and check flags for PAM_SILENT - remove dummy functions since OpenPAM handles missing service functions - fix various warnings Sponsored by: DARPA, NAI Labs
* Moved SHLIB_NAME definition into one place.ru2002-04-101-2/+1
| | | | Approved by: des
* Fixed broken "make depend; make clean; make all" sequence.ru2002-04-101-1/+1
| | | | | | | | I've looked for this example for a long time, to demonstrate some people why it's a really BAD idea to use ${.OBJDIR} instead of ".". I hope these people are reading this. :-) Approved by: des
* Align for const poisoning in -lutil.ru2002-04-081-3/+3
|
* Reorganize pam_sm_authenticate() to reduce code duplication.des2002-04-071-59/+22
| | | | Sponsored by: DARPA, NAI Labs
* Fix bug in previous commit that passed the wrong default value todes2002-04-071-6/+8
| | | | | | | | | login_getcapstr(3). Also fix a longer-standing bug (login_close(3) frees the string returned by login_getcapstr(3)) by reorganizing the code a little, and use login_getpwclass(3) instead of login_getclass(3) if we already have a struct pwd. Sponsored by: DARPA, NAI Labs
* Aggressive cleanup of warnings + authtok-related code in preparation fordes2002-04-061-78/+29
| | | | | | PAMifying passwd(1). Sponsored by: DARPA, NAI Labs.
* Fix some style issues, a const warning, and abuse of PAM_ABORT.des2002-04-061-11/+15
| | | | Sponsored by: DARPA, NAI Labs
* Fix world breakage introduced by my recent modifications tocjc2002-03-182-2/+3
| | | | | | | chpass(8). The relations between libc, libpam, chpass, passwd, and vipw are a mess and probably should be cleaned up. Submitted by: Peter Pentchev <roam@ringlet.net>
* NAI DBA update.des2002-03-142-2/+2
|
* Remove the use of random(3), and encapsulate the salt-generation inmarkm2002-03-141-30/+33
| | | | | | | its own function. The use of arc4random(3) is hopeless overkill here, but that does not hurt anything. Requested by: ache
* Don't ignore system CFLAGS.sobomax2002-03-071-1/+1
|
* Switch to OpenPAM. Bump library version. Modules are now versioned, sodes2002-03-052-44/+37
| | | | | | | | | applications linked with Linux-PAM will still work. Remove pam_get_pass(); OpenPAM has pam_get_authtok(). Remove pam_prompt(); OpenPAM has pam_{,v}{error,info,prompt}(). Remove pam_set_item(3) man page as OpenPAM has its own. Sponsored by: DARPA, NAI Labs
* This file needs <syslog.h>.des2002-02-091-0/+1
| | | | Sponsored by: DARPA, NAI Labs
* Remove NO_WERROR, now that WARNS=n is gone.markm2002-02-061-1/+0
|
* #include cleanup.des2002-02-051-2/+2
| | | | Sponsored by: DARPA, NAI Labs
* Add the other half of the salt-generating code. No functionalmarkm2002-02-041-8/+7
| | | | | difference except that the salt is slightly harder to build dictionaries against, and the code does not use srandom[dev]().
* WARNS=n fixes (and some stylistic issues).markm2002-02-031-25/+27
|
* With asbestos longjohns on, integrate most of the checks normally done bydes2002-01-301-32/+102
| | | | | | login(1) (password & account expiry, hosts.access etc.) into pam_unix(8). Sponsored by: DARPA, NAI Labs
* WARNS=4 fixes. Protect with NO_WERROR for the modules that havemarkm2002-01-241-0/+1
| | | | warnings that are hard to fix or that I've been asked to leave alone.
* Back out recent changesache2002-01-191-12/+12
|
* Back out second right-now-expired password check in pam_sm_chauthtok,ache2002-01-191-2/+1
| | | | old expired password assumed there
* Add yet one expired-right-now password check, in pam_sm_chauthtokache2002-01-191-13/+12
| | | | | srandomdev() can't be used in libraries, replace srandomdev()+random() by arc4random()
* Add missing check for right-now-expired passwordache2002-01-191-0/+2
|
* mdoc(7) police: sort xrefs.ru2001-12-081-5/+5
|
* Document the local_pass and nis_pass options, add a few xrefs, and reorderdes2001-11-271-5/+29
| | | | | | the SEE ALSO section. License modified with original author's permission. Sponsored by: DARPA, NAI Labs
* Don't put an extra space after password prompts, because it violates POLA,sobomax2001-10-251-4/+4
| | | | | | makes FreeBSD inconsistent with previous releases and "other unices" as well as with some internal password-asking services (e.g. ftp) within the same release.
* Add __FBSDID()s to libpamdillon2001-09-301-2/+3
|
* Big module makeover; improve logging, standardise variable names,markm2001-08-263-22/+537
| | | | | introduce ability to change passwords for both "usual" Unix methods and NIS.
* Fix a couple of cross-references to reflect the reality of the module.markm2001-08-151-2/+2
|
* mdoc(7) police: -xwidth has been fold into -width.ru2001-07-131-3/+3
|
* mdoc(7) police: fixed markup, a little bit.ru2001-07-111-8/+8
|
* Clean up (and in some cases write) the PAM mudules, usingmarkm2001-07-093-33/+222
| | | | | | | | | | o The new options-processing API o The new DEBUG-logging API Add man(1) pages for ALL modules. MDOC-Police welcome to check this. Audit, clean up while I'm here.
* Big module cleanup.markm2001-06-041-9/+2
| | | | | | | | | | | Move common stuff into Makefile.inc, and tidy up all the Makefiles as a result. Build new modules. Put a commented-out dependancy on libpam for the (shared) modules. I can't bring this in just yet, as the dependancy (modules->libpam) is reversed for the static case (libpam->modules).
* Add the "nullok" option that causes this module to succeed if the Unixmarkm2001-06-041-3/+11
| | | | password is empty/null.
* Add the "auth_as_self" option to the pam_unix module (there is nomarkm2001-05-241-3/+8
| | | | | | | reason not to add it to others later). This causes the pam_unix module to check the user's _own_ password, not the password of the account that the user is authenticating into. This will allow eg: WHEELSU type behaviour from su(1).
* Use a unified libgcc rather than a seperate one for threaded andobrien2001-01-061-2/+2
| | | | | | | | non-threaded programs. This provides threaded programs with the needed exception frame symbols. parts submitted by: Max Khon <fjoe@iclub.nsu.ru> PR: 23252
* Add libcrypt. This previously/coincidentally worked for login,markm1999-09-301-2/+2
| | | | | because login was already linked against it, but others have a problem.
* Revive the pam_deny and pam_permit modules from Linux-PAM. They arejdp1999-05-082-2/+76
| | | | | | | | | | simple enough to be trusted. Add account management functionality to the pam_unix module. These changes should make it possible to use PAM in some ports. Submitted by: Max Khon <fjoe@iclub.nsu.ru>
* Fix bug that prevented accounts with empty passwords from loggingjdp1999-04-061-1/+1
| | | | | | in. Submitted by: Paul Traina <pst@juniper.net>
* Make it possible to use PAM in statically-linked applications.jdp1999-01-202-7/+8
|
* Build structure for contribified Linux-PAM, plus some home-grownjdp1998-11-182-0/+129
modules for FreeBSD's standard authentication methods. Although the Linux-PAM modules are present in the contrib tree, we don't use any of them. The main library "libpam" is composed of sources taken from three places. First are the standard Linux-PAM libpam sources from the contrib tree. Second are the Linux-PAM "libpam_misc" sources, also from the contrib tree. In Linux these form a separate library. But as Mike Smith pointed out to me, that seems pointless, so I have combined them into the libpam library. Third are some additional sources from the "src/lib/libpam" tree with some common functions that make it easier to write modules. Those I wrote myself. This work has been donated to FreeBSD by Juniper Networks, Inc.
OpenPOWER on IntegriCloud