| Commit message (Collapse) | Author | Age |
... | |
|
|
|
|
|
|
|
| |
Purpose of commit: documentation
Commit summary:
---------------
added some pam_tally documentation.
|
|
|
|
|
|
|
|
| |
Purpose of commit: documentation
Commit summary:
---------------
added some links to sample module code (into the CVS repository).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: minor security bugfix
Commit summary:
---------------
Fixes for the password helper binaries.
Before, there was no check that the password entered was actually that
of the intended user being authenticated. Instead, the password was
checked for the requesting user. While this disstinction sounds like a
security hole, its actually not been a problem in practice. The helper
binaries have only been used in the case that the application is not
setuid-0 and as such even if an improper authentication succeeded, the
application could not change its uid from that of the requesting user.
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
Needed to link lastlog module with -lutil (on some systems).
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
On systems that have a separate libcrypt. This module needed to be
linked against it.
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
static library and debugging library support fixed - post autoconf stuff.
|
|
|
|
|
|
|
|
| |
Purpose of commit: change URL
Commit summary:
---------------
Fix the URL for a copy of the original PAM RFC.
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
needed quotes around a possibly blank shell variable.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
This bugfix leads to backwardly incompatable behavior with earlier
releases of Linux-PAM.
Note, this cleans up the setcred/session and chauthtok stacks in
such a way that it is no longer preferred that the setcred module
always return the same error code as the auth components of said
modules did.
This means behavior should be a great deal more sane. It also gives
meaning to the unique return codes that are available to pam_sm_setcred.
[I'm sure that when we add support for credential relevant events,
this change will be critical.]
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: start next release
Commit summary:
---------------
I've bumped the version number, and added some Makefile code
for helping me make documentation releases.
|
|
|
|
|
|
|
|
| |
Purpose of commit: make release
Commit summary:
---------------
Its that time again - time to release 0.74
|
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: new feature + documentation
Commit summary:
---------------
Cleaned up the handling of AUTHTOK items and pam_[gs]et_data() functions.
Added more clear documentation about the pam_[gs]et_item() functions to
the pam_appl and pam_modules programmer guides.
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
non-default config file option fixes (module and in documentation).
|
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: documentation
Commit summary:
---------------
added a note to this man page explaining that we do support a
default directory for modules. Also added some text describing
the alternative control syntax for pam configuration files.
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
ia64 support - it behaves like an alpha wrt md5, but then unsigned int
is 32 bits everywhere(*) these days, so just remove the #ifdef nonsense.
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: cleanup
Commit summary:
---------------
This brings the binary prompt hooks in libpam_misc's conversation
function into line with the current libpamc library.
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
Appear to have left these fixes out with last commit to resolve 117434.
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
Nothing in the sources requires C++. So, there is no need to
have autoconf require it.
|
|
|
|
|
|
|
|
| |
Purpose of commit: feature
Commit summary:
---------------
removed directory references from man includes (man8/pam.8 -> pam.8)
|
|
|
|
|
|
|
|
| |
Purpose of commit: portability bugfix
Commit summary:
---------------
Removed non-posix shell command from pam_filter Makefile.
|
|
|
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: new feature / bugfix
Commit summary:
---------------
This changes the format of pam_unix log messages, per bug 126423. The
change is extensive (every call to _log_err() now has an additional
argument) but straightforward.
These changes to the logging code incidentally fix the problem reported in
bug 126431.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: cleanup
Commit summary:
---------------
Changes format of pam_unix 'authentication failure' log messages for
purposes of consistency and clarity.
Note that we do not log the 'user=' item in the case of an invalid username
unless the audit flag is turned on.
Note also that the way we currently log these failures isn't i18n-friendly.
I imagine this will need correcting at some point in the future.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: cleanup
Commit summary:
---------------
Changes format of pam_unix 'authentication failure' log messages for
purposes of consistency and clarity.
Note that we do not log the 'user=' item in the case of an invalid username
unless the audit flag is turned on.
Note also that the way we currently log these failures isn't i18n-friendly.
I imagine this will need correcting at some point in the future.
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: portable handling of utmp in pam_unix
Commit summary:
---------------
Fixes problem with PAM_getlogin() on Solaris (and hopefully other Unices),
as per David Lee's report.
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
upper -> lowercase substitution for OS fixed in configure.in.
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
removed static variables from pam_tally - should be thread safe now.
|
|
|
|
|
|
|
|
| |
Purpose of commit: copyright notice
Commit summary:
---------------
Added an original sources copyright notice to pam_access (from logdaemon).
|
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: cleanup
Commit summary:
---------------
Remove the -Wtraditional flag from the GCC options. It causes strange and
annoying spam. Also reordered the progs verses argument parsing stuff
to avoid a warning from autoconf (back to one strange warning again).
|
|
|
|
|
|
|
|
| |
Purpose of commit: new feature
Commit summary:
---------------
* pam_mail - use PAM_PATH_MAILDIR as the location of mail spool
|
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: new feature
Commit summary:
---------------
* _pam_aconf.h.in, configure.in - added PAM_PATH_MAILDIR set via
--with-mailspool=dir option (default is _PAM_MAILDIR if defined
in paths.h otherwise /var/spool/mail
|
|
|
|
|
|
|
|
| |
Purpose of commit: cleanup
Commit summary:
---------------
* removed unnecessary CVS Log tags from all over the source
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
* pam_tally - check for PAM_TTY if PAM_RHOST is not set when writing
to faillog
|
|
|
|
|
|
|
|
| |
Purpose of commit: security
Commit summary:
---------------
* use O_NOFOLLOW if available when opening debug log
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
* removed comments about pam_unix not working with pam_cracklib,
added information about use_authtok parameter
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
- removed comments about pam_unix not working with pam_cracklib,
added information about use_authtok parameter
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
* fixed wrong definition of struct pam_module (was pam_wheel)
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
- fixed wrong definition of struct pam_module (was pam_wheel)
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
examples/Makefile contained a bogus include path.
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
Makefile dependencies
pam_userdb did not compile on a Red Hat 5.2 system. It does now.
|
|
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: release
Commit summary:
---------------
Time to generate a release of Linux-PAM (0.73).
Its almost been 12 months, and I'd really hate to actually have it
hit a year exactly!
[Let's hope subsequent releases will be more frequent.]
|
|
|
|
|
|
|
|
| |
Purpose of commit: documentation
Commit summary:
---------------
Jan had a comment to address this PR.
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: new feature
Commit summary:
---------------
add change_uid option to pam_limits, and set real uid only
if this option is present
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
pam_limits - set real uid to the user for who we set limits
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
set real uid to the user for who we set limits
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
removed static variables from pam_limits.
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
removed static variable from pam_wheel module.
|
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
Added pam_time/pam_group fixes for infinite loop when reading
'\\[^\n]' in their config files and also added support for '/'.
The latter makes both of these modules support modern tty handling.
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
avoid possibility of SIGPIPE from helper binary non-invocation or
early exit.
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: bugfix
Commit summary:
---------------
fixed the bogus logic in 'similiar' (renamed it to similar) and
documented the new override argument: difignore.
|
|
|
|
|
|
|
|
|
| |
Purpose of commit: documentation
Commit summary:
---------------
Documentation for new accessconf= module argument
contributed by Meelis Roos.
|