summaryrefslogtreecommitdiffstats
path: root/lib/libpam
Commit message (Collapse)AuthorAgeFilesLines
* english(4) police.schweikh2002-12-273-3/+3
|
* mdoc(7) police: removed gratuitous .Pp call.ru2002-12-231-1/+0
|
* Merge in most non-style differences from Andrew Korty's pam_ssh 1.7.des2002-12-163-51/+70
|
* mdoc(7) police: .Dt is ALL UPPERCASE.ru2002-12-121-1/+1
| | | | Approved by: re
* mdoc(7) police: formatting nits.ru2002-11-292-3/+6
| | | | Approved by: re
* Whitespace nits.des2002-11-281-2/+2
| | | | Approved by: re (bmah)
* Add a PAM_MODULE_ENTRY to this module so it'll actually do something.des2002-11-281-0/+2
| | | | Approved by: re (bmah)
* utmp.ut_time and lastlog.ll_time are explicitly int32_t rather thanpeter2002-11-151-4/+6
| | | | | | | | | | | | time_t. Deal with the possibility that time_t != int32_t. This boils down to this sort of thing: - time(&ut.ut_time); + ut.ut_time = time(NULL); and similar for ctime(3) etc. I've kept it minimal for the stuff that may need to be portable (or 3rd party code), but used Matt's time32 stuff for cases where that isn't as much of a concern. Approved by: re (jhb)
* Make dynamic PAM modules depend on dynamic PAM library.ru2002-11-141-4/+7
| | | | Requested by: des, markm
* The pam_krb5 module stored a reference to a krb5_ccache structure asnectar2002-11-131-20/+42
| | | | | | | | | | | | | | | | | PAM module state (created in pam_sm_authenticate and referenced later in pam_sm_setcred and pam_sm_acct_mgmt). However, the krb5_ccache structure shares some data members with the krb5_context structure that was used in its creation. Since a new krb5_context is created and destroyed at each PAM entry point, this inevitably caused the krb5_ccache structure to reference free'd memory. Now instead of storing a pointer to the krb5_ccache structure, we store the name of the cache (e.g. `MEMORY:0x123CACHE') in pam_sm_authenticate, and resolve the name in the other entry points. This bug was uncovered by phkmalloc's free'd memory scrubbing. Approved by: re (jhb)
* Use `krb5_get_err_text' instead of `error_message' so that instead ofnectar2002-11-131-24/+47
| | | | | | | | | | | | | | | | | e.g. Unknown error: -1765328378 we get Client not found in Kerberos database Another way to accomplish this would have been to leave `error_message' alone, but to explicitly load the Kerberos com_err error tables. However, I don't really like the idea of a PAM module dorking with global tables. Approved by: re (jhb)
* Allow the admin to specify a different NAS identifier than the hostname.des2002-10-282-11/+20
| | | | Submitted by: Boris Kovalenko <boris@ntmk.ru>
* Introduce 'exempt_if_empty' option to pam_wheel(8), which bypasses therwatson2002-10-182-2/+18
| | | | | | | | | | group membership requirement if the group has no explicit members listed in /etc/group. By default, this group is the wheel group; setting this flag restores the default BSD behavior from 4.x. Reviewed by: markm Requested by: various Sponsored by: DARPA, Network Associates Laboratories
* Build kerberized versions of the PAM library, and install themru2002-10-111-0/+8
| | | | | | | into corresponding distributions during "make release". (This also cleans the "slib" distribution up from the .o files.) PR: misc/43825 (inspired by)
* Zap now-unused SHLIB_MINORpeter2002-09-281-1/+0
|
* Initiate deorbit burn for the i386-only a.out related support. Moves arepeter2002-09-171-4/+0
| | | | | | | | | | | | | | | under way to move the remnants of the a.out toolchain to ports. As the comment in src/Makefile said, this stuff is deprecated and one should not expect this to remain beyond 4.0-REL. It has already lasted WAY beyond that. Notable exceptions: gcc - I have not touched the a.out generation stuff there. ldd/ldconfig - still have some code to interface with a.out rtld. old as/ld/etc - I have not removed these yet, pending their move to ports. some includes - necessary for ldd/ldconfig for now. Tested on: i386 (extensively), alpha
* Since pam_get_authtok(3) doesn't know about our options structure, settingdes2002-07-301-10/+11
| | | | | | | | the PAM_ECHO_PASS option on-the-fly is a NOP (though it wasn't with the old pam_get_pass(3) code). Instead, call pam_prompt(3) directly. This actually simplifies the code a bit. MFC after: 3 days
* Install more man pages - I thought I'd committed this ages ago...des2002-07-231-0/+5
|
* Tidy up.ru2002-06-061-10/+3
|
* Missed one in previous commit.des2002-05-301-2/+4
| | | | Pointed out by: nectar
* mdoc(7) police: kill whitespace at EOL.ru2002-05-301-1/+1
|
* mdoc(7) police: polish markup.ru2002-05-301-34/+68
|
* mdoc(7) police: tidy up the markup.ru2002-05-301-6/+15
|
* Add pam_ksu(8), a module to do Kerberos 5 authentication andnectar2002-05-284-0/+412
| | | | | | $HOME/.k5login authorization for su(1). Reviewed by: des (earlier version)
* Add openpam_nullconv.3.des2002-05-241-0/+1
|
* Add missing include.des2002-05-241-0/+1
|
* Just to show that PAM can do almost anything from the ridiculous to thedes2002-05-237-0/+418
| | | | | | | obscene, or - as they say in New York - sophisticated, add pam_echo(8) and pam_exec(8) to our ever-lengthening roster of PAM modules. Sponsored by: DARPA, NAI Labs.
* Hide a couple of unguarded error returns behind the no_fail test.des2002-05-231-5/+6
|
* Free old_pwd only in the code path where it has been allocated.jmallett2002-05-221-1/+1
| | | | Reviewed by: des
* Do not build pam_ssh if NOSECURE is set (NO_OPENSSL is on a subset of NOSECURE)obrien2002-05-151-1/+2
|
* Major cleanup of bsd.lib.mk.ru2002-05-131-2/+2
| | | | | | | Get rid of the INTERNALSTATICLIB knob and just use plain INTERNALLIB. INTERNALLIB now means to build static library only and don't install anything. Added a NOINSTALLLIB knob for libpam/modules. To not build any library at all, just do not set LIB.
* Added new bsd.incs.mk which handles installing of header filesru2002-05-121-10/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | via INCS. Implemented INCSLINKS (equivalent to SYMLINKS) to handle symlinking include files. Allow for multiple groups of include files to be installed, with the powerful INCSGROUPS knob. Documentation to follow. Added standard `includes' and `incsinstall' targets, use them in Makefile.inc1. Headers from the following makefiles were not installed before (during `includes' in Makefile.inc1): kerberos5/lib/libtelnet/Makefile lib/libbz2/Makefile lib/libdevinfo/Makefile lib/libform/Makefile lib/libisc/Makefile lib/libmenu/Makefile lib/libmilter/Makefile lib/libpanel/Makefile Replaced all `beforeinstall' targets for installing includes with the INCS stuff. Renamed INCDIR to INCSDIR, for consistency with FILES and SCRIPTS, and for compatibility with NetBSD. Similarly for INCOWN, INCGRP, and INCMODE. Consistently use INCLUDEDIR instead of /usr/include. gnu/lib/libstdc++/Makefile and gnu/lib/libsupc++/Makefile changes were only lightly tested due to the missing contrib/libstdc++-v3. I fully tested the pre-WIP_GCC31 version of this patch with the contrib/libstdc++.295 stuff. These changes have been tested on i386 with the -DNO_WERROR "make world" and "make release".
* Don't declare krb5_mcc_ops, it's already declared in <krb5.h>des2002-05-121-2/+0
|
* Use libutil and libypclnt for all passwd manipulation and NIS needs.des2002-05-082-22/+41
| | | | Sponsored by: DARPA, NAI Labs
* Add a no_fail option.des2002-05-082-6/+20
| | | | Sponsored by: DARPA, NAI Labs
* Add pam_ftpusers(8), which enforces /etc/ftpusers.des2002-05-084-0/+222
| | | | Sponsored by: DARPA, NAI Labs
* Add openpam_nullconv.c to SRCS.des2002-05-021-0/+1
|
* Don't ask root for the old password, except in the NIS case.des2002-04-261-1/+6
| | | | Sponsored by: DARPA, NAI Labs
* Fix a really dumb bug (missing curly braces around the body of an ifdes2002-04-261-2/+3
| | | | statement) that caused pam_sm_chauthtok() to always fail silently.
* Oops, fix an inverted if test.des2002-04-201-1/+1
|
* Strip /dev/ from tty name, and clean up the "last login" printout.des2002-04-201-6/+10
| | | | Sponsored by: DARPA, NAI Labs
* Revert previous change. bsd.dep.mk,v 1.31 had a bug that was fixedru2002-04-171-2/+2
| | | | in revision 1.32 and made this change OBE.
* Add a missing .El and fix a typo.des2002-04-161-1/+2
| | | | | Spotted by: Solar Designer <solar@openwall.com> Sponsored by: DARPA, NAI Labs
* Reflect change in share/mk/bsd.dep.mk,v 1.31.ru2002-04-161-2/+2
|
* Revert previous commit, it is incorrect.des2002-04-151-1/+1
|
* Properly spell rpcsvc/ypclnt.h and fix the build.obrien2002-04-151-1/+1
|
* Throw in NO_WERROR to please the peanut gallery.des2002-04-151-0/+1
|
* Use PAM_SUCCESS instead of PAM_IGNORE.des2002-04-152-3/+3
|
* Whitespace nits.des2002-04-151-17/+17
|
* Add a manual page based on Solar Designer's README.des2002-04-152-1/+234
| | | | Sponsored by: DARPA, NAI Labs
OpenPOWER on IntegriCloud