Ruslan Ermilov
9baa2c98cf
mdoc(7) police: tidy up the markup.
2002-05-30 14:32:48 +00:00
Jacques Vidrine
3a27166692
Add pam_ksu(8), a module to do Kerberos 5 authentication and
...
$HOME/.k5login authorization for su(1).
Reviewed by: des (earlier version)
2002-05-28 20:52:31 +00:00
Dag-Erling Smørgrav
f346f31b43
Add missing include.
2002-05-24 13:20:40 +00:00
Dag-Erling Smørgrav
f65b218085
Just to show that PAM can do almost anything from the ridiculous to the
...
obscene, or - as they say in New York - sophisticated, add pam_echo(8) and
pam_exec(8) to our ever-lengthening roster of PAM modules.
Sponsored by: DARPA, NAI Labs.
2002-05-23 22:03:06 +00:00
Dag-Erling Smørgrav
2569c273c7
Hide a couple of unguarded error returns behind the no_fail test.
2002-05-23 00:02:59 +00:00
Juli Mallett
816c6c91e2
Free old_pwd only in the code path where it has been allocated.
...
Reviewed by: des
2002-05-22 23:18:25 +00:00
David E. O'Brien
1dba4170b1
Do not build pam_ssh if NOSECURE is set (NO_OPENSSL is on a subset of NOSECURE)
2002-05-15 20:25:32 +00:00
Ruslan Ermilov
2a53f3fb35
Major cleanup of bsd.lib.mk.
...
Get rid of the INTERNALSTATICLIB knob and just use plain INTERNALLIB.
INTERNALLIB now means to build static library only and don't install
anything. Added a NOINSTALLLIB knob for libpam/modules. To not
build any library at all, just do not set LIB.
2002-05-13 10:53:24 +00:00
Dag-Erling Smørgrav
55589c84e2
Don't declare krb5_mcc_ops, it's already declared in <krb5.h>
2002-05-12 07:06:27 +00:00
Dag-Erling Smørgrav
f1d0592537
Use libutil and libypclnt for all passwd manipulation and NIS needs.
...
Sponsored by: DARPA, NAI Labs
2002-05-08 00:54:29 +00:00
Dag-Erling Smørgrav
89136eab16
Add a no_fail option.
...
Sponsored by: DARPA, NAI Labs
2002-05-08 00:31:45 +00:00
Dag-Erling Smørgrav
2256d3698a
Add pam_ftpusers(8), which enforces /etc/ftpusers.
...
Sponsored by: DARPA, NAI Labs
2002-05-08 00:30:10 +00:00
Dag-Erling Smørgrav
0f6517b7d8
Don't ask root for the old password, except in the NIS case.
...
Sponsored by: DARPA, NAI Labs
2002-04-26 19:28:17 +00:00
Dag-Erling Smørgrav
c8c20c5226
Fix a really dumb bug (missing curly braces around the body of an if
...
statement) that caused pam_sm_chauthtok() to always fail silently.
2002-04-26 01:47:48 +00:00
Dag-Erling Smørgrav
750e6876cf
Oops, fix an inverted if test.
2002-04-20 16:52:41 +00:00
Dag-Erling Smørgrav
1583027008
Strip /dev/ from tty name, and clean up the "last login" printout.
...
Sponsored by: DARPA, NAI Labs
2002-04-20 16:44:32 +00:00
Dag-Erling Smørgrav
b1e0b30d83
Add a missing .El and fix a typo.
...
Spotted by: Solar Designer <solar@openwall.com>
Sponsored by: DARPA, NAI Labs
2002-04-16 22:38:47 +00:00
Dag-Erling Smørgrav
c82bffaa40
Revert previous commit, it is incorrect.
2002-04-15 22:51:31 +00:00
David E. O'Brien
f01afd3101
Properly spell rpcsvc/ypclnt.h and fix the build.
2002-04-15 22:47:28 +00:00
Dag-Erling Smørgrav
4c8153125a
Throw in NO_WERROR to please the peanut gallery.
2002-04-15 13:10:28 +00:00
Dag-Erling Smørgrav
53fd6d26b2
Use PAM_SUCCESS instead of PAM_IGNORE.
2002-04-15 06:26:32 +00:00
Dag-Erling Smørgrav
ab4f115e57
Whitespace nits.
2002-04-15 03:52:22 +00:00
Dag-Erling Smørgrav
f71d08000d
Add a manual page based on Solar Designer's README.
...
Sponsored by: DARPA, NAI Labs
2002-04-15 03:45:14 +00:00
Dag-Erling Smørgrav
a11a75ce7c
pam_passwdqc depends on libcrypt.
2002-04-15 03:44:42 +00:00
Dag-Erling Smørgrav
7b733689a3
Prompt for new password during update phase, not during preliminary phase.
...
Sponsored by: DARPA, NAI Labs
2002-04-15 03:00:14 +00:00
Dag-Erling Smørgrav
ff1bc287ac
Dike out most of the NIS code and replace it with calls to libypclnt.
...
Rework pam_sm_chauthtok() so it (mostly?) works.
The standard pw stuff still needs to move into a library somewhere.
Sponsored by: DARPA, NAI Labs
2002-04-15 02:34:43 +00:00
Dag-Erling Smørgrav
f2b9b94ab4
pam_passwdqc builds now.
2002-04-14 22:31:36 +00:00
Dag-Erling Smørgrav
81a587f467
More recent versions of pam_passwdqc (not yet released) build with very
...
few warnings.
2002-04-14 18:48:57 +00:00
Dag-Erling Smørgrav
24fe7ba0d9
Major cleanup:
...
- add __unused where appropriate
- PAM_RETURN -> return since OpenPAM already logs the return value.
- make PAM_LOG use openpam_log()
- make PAM_VERBOSE_ERROR use openpam_get_option() and check flags
for PAM_SILENT
- remove dummy functions since OpenPAM handles missing service
functions
- fix various warnings
Sponsored by: DARPA, NAI Labs
2002-04-12 22:27:25 +00:00
Dag-Erling Smørgrav
95ca4cb3f6
Add a pam_rhosts module, loosely based on code submitted by Danny Braniss.
...
Submitted by: Danny Braniss <danny@cs.huji.ac.il>
Sponsored by: DARPA, NAI Labs
2002-04-12 20:10:18 +00:00
Dag-Erling Smørgrav
fd994fa945
Rename the even_root option to allow_root.
...
Sponsored by: DARPA, NAI Labs
2002-04-12 20:05:27 +00:00
Ruslan Ermilov
90a9863e16
Moved SHLIB_NAME definition into one place.
...
Approved by: des
2002-04-10 18:07:05 +00:00
Ruslan Ermilov
196f4c26f4
Fixed broken "make depend; make clean; make all" sequence.
...
I've looked for this example for a long time, to demonstrate
some people why it's a really BAD idea to use ${.OBJDIR}
instead of ".". I hope these people are reading this. :-)
Approved by: des
2002-04-10 18:00:32 +00:00
Ruslan Ermilov
e348eb5318
Fix broken `checkdpadd'.
...
-lroken is an installable library, there's no need to give an
explicit path to it. In any case, -L paths should be specified
in LDFLAGS if needed.
Approved by: des
2002-04-10 17:53:43 +00:00
Dag-Erling Smørgrav
2270ac91b4
Remove debugging code that was inadvertantly brought in by previous commit.
2002-04-08 12:41:08 +00:00
Dag-Erling Smørgrav
eafd17c552
Use OpenPAM's credential switching functions.
...
Sponsored by: DARPA, NAI Labs
2002-04-08 12:38:50 +00:00
Ruslan Ermilov
f2f306b622
Align for const poisoning in -lutil.
2002-04-08 11:07:51 +00:00
Dag-Erling Smørgrav
50000f00df
Reorganize pam_sm_authenticate() to reduce code duplication.
...
Sponsored by: DARPA, NAI Labs
2002-04-07 21:18:18 +00:00
Dag-Erling Smørgrav
a8b1e59eb2
Fix bug in previous commit that passed the wrong default value to
...
login_getcapstr(3). Also fix a longer-standing bug (login_close(3)
frees the string returned by login_getcapstr(3)) by reorganizing the
code a little, and use login_getpwclass(3) instead of login_getclass(3)
if we already have a struct pwd.
Sponsored by: DARPA, NAI Labs
2002-04-07 20:43:27 +00:00
Dag-Erling Smørgrav
9db21c5fd1
This one needs NO_WERROR too.
2002-04-07 12:53:58 +00:00
Dag-Erling Smørgrav
92c07aa880
Turn on NO_WERROR due to namespace pollution in krb5 headers.
2002-04-07 04:44:16 +00:00
Dag-Erling Smørgrav
111ccd256c
Aggressive cleanup of warnings + authtok-related code in preparation for
...
PAMifying passwd(1).
Sponsored by: DARPA, NAI Labs.
2002-04-06 19:30:04 +00:00
Dag-Erling Smørgrav
18006b1ab8
Disconnect pam_passwdqc for now, it has some issues that need resolving.
2002-04-06 19:25:36 +00:00
Dag-Erling Smørgrav
4004c08e79
Fix some style issues, a const warning, and abuse of PAM_ABORT.
...
Sponsored by: DARPA, NAI Labs
2002-04-06 14:25:04 +00:00
Dag-Erling Smørgrav
40b93e6278
Remove some duplicate free()s and add some that were missing.
...
Submitted by: tmm
2002-04-05 20:00:05 +00:00
Dag-Erling Smørgrav
f8334e0084
pam_get_pass() -> pam_get_authtok()
2002-04-05 10:49:45 +00:00
Dag-Erling Smørgrav
8f85b6caad
Upgrade to something quite close, but not identical, to version 1.6 of
...
Andrew Korty's pam_ssh. The most notable difference is that this uses
commas rather than colons to separate items in the "keyfiles" option.
Sponsored by: DARPA, NAI Labs
2002-04-04 18:45:21 +00:00
Dag-Erling Smørgrav
2b814c7ea1
Add pam_passwdqc to the build.
...
Sponsored by: DARPA, NAI Labs
2002-04-04 16:08:28 +00:00
Mark Murray
b51066a362
Fix for OPIE 2.4.
2002-03-22 09:20:05 +00:00
Ruslan Ermilov
7d1f1e9ca8
mdoc(7) police: fix SYNOPSIS, sort xrefs, kill extra whitespace.
2002-03-18 15:59:53 +00:00