summaryrefslogtreecommitdiff
path: root/modules
Commit message (Collapse)AuthorAge
* Relevant BUGIDs: 643357Steve Langasek2003-07-13
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Patch from Sam Hartman to fix handling of module linking on Linux: modules should be linked against libpam if they call any functions from the library, since not all platforms will correctly resolve symbol references otherwise. Also, make sure we use gcc, not ld, when linking, since there's additional linker glue that gcc will pull in for us.
* Relevant BUGIDs: patch 476984Steve Langasek2003-07-13
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Patch from Nalin Dahyabhai: always compare tty names without the "/dev", working around inconsistent handling among apps. Also, make minor adjustments for robustness (handle DOS EOL chars, and don't hardcode array sizes).
* Relevant BUGIDs: patch 476976Steve Langasek2003-07-13
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Patch from Nalin Dahyabhai: when updating /etc/{passwd,shadow}, always respect any admin-specified permissions on the existing files.
* Relevant BUGIDs: patch 476968Steve Langasek2003-07-13
| | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Patch from Nalin Dahyabhai to prevent a buffer overflow in pam_issue (rare, but could be triggered by a race condition when the admin updates /etc/issue).
* Relevant BUGIDs: patch 476967Steve Langasek2003-07-13
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Patch from Nalin Dahyabhai: an empty tty value is not fatal when the user isn't root.
* Relevant BUGIDs: patch 476936Steve Langasek2003-07-13
| | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Variant on Nalin's patch: 'unsigned int' is /usually/ 32 bits, but uint32_t is /always/ 32 bits -- where present. Since C99 is fairly recent, we may need some autoconf support for older platforms, but should at least be covered for Linux & Solaris. (Still a better choice than the non-standard sys/types.h, though.)
* Relevant BUGIDs: 667584 664290Andrew G. Morgan2003-01-14
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Two bug fixes in one: don't trust getlogin() and sanely lower the time the password databases are locked in pam_unix.
* Relevant BUGIDs: 521314Andrew G. Morgan2002-09-23
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- This code is needed to complete this bugfix.
* Relevant BUGIDs: 476951, 476953Andrew G. Morgan2002-07-13
| | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Be more careful when using the deny option - pay attention to the trust option before you grant access. Fix from Nalin.
* Relevant BUGIDs: 436435Andrew G. Morgan2002-07-13
| | | | | | | | | Purpose of commit: new feature Commit summary: --------------- add account management to a bunch of modules. Submitted by Harald Welte.
* Relevant BUGIDs: 476941, 476980Andrew G. Morgan2002-07-11
| | | | | | | | | | Purpose of commit: bugfix and new feature Commit summary: --------------- fix case that wheel is the primary group of the user add support for passwordless transitions from a trusted user to another non-root user.
* Relevant BUGIDs: 476963Andrew G. Morgan2002-07-11
| | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- some applications are not prepared to get a SIGCHLD from a child process they didn't think they launched, so we now suppress this signal for the duration of use of the helper binary. The 'noreap' module argument is provided to override this new default.
* Relevant BUGIDs: 521314Andrew G. Morgan2002-07-09
| | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- bigcrypt does not match crypt when password length is too long. This led to a pam_unix problem when the module had not set the password in bigcrypt mode, but was trying to compare with bigcrypt output. The fix is to use the stored password as a guide to how much of the encrypted password to compare against.
* Relevant BUGIDs: 415423Andrew G. Morgan2002-06-27
| | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Shouldn't explicitly include prototype in the file - it conflicts with common defaults and thus should not be there. (Request for removal from David Lee.)
* Relevant BUGIDs: 419307Andrew G. Morgan2002-06-27
| | | | | | | | | Purpose of commit: new feature/cleanup Commit summary: --------------- made pam_nologin more secure by changing the default behavior and adding some more features. General code clean up in the process.
* Relevant BUGIDs: 476971Andrew G. Morgan2002-05-29
| | | | | | | | Purpose of commit: documentation Commit summary: --------------- typo/correctness fixes from Nalin.
* Relevant BUGIDs: 424315Andrew G. Morgan2002-05-29
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- This was a reimplementation of pam_warn to be more useful. I did it in conjuction with testing the new setcred behavior.
* Relevant BUGIDs: 490938, 409852Andrew G. Morgan2002-05-29
| | | | | | | | Purpose of commit: cleanup Commit summary: --------------- add a cvsignore file
* Relevant BUGIDs: 557322Andrew G. Morgan2002-05-26
| | | | | | | | Purpose of commit: cleanup Commit summary: --------------- clean up a compilation warning about strcmp() not being defined.
* Relevant BUGIDs: 533664Jan Rekorajski2002-05-09
| | | | | | | | Purpose of commit: new feature Commit summary: --------------- documented % domain
* Relevant BUGIDs: 533664Jan Rekorajski2002-05-09
| | | | | | | | | Purpose of commit: new feature Commit summary: --------------- added '%' domain for maxlogins limiting, now '*' and @group have the old meaning (every) and '%' the new one (all)
* Relevant BUGIDs: 533668Jan Rekorajski2002-05-07
| | | | | | | | Purpose of commit: cleanup Commit summary: --------------- put not so interesting log messages under debug arg
* Relevant BUGIDs: 547051, 547521Andrew G. Morgan2002-05-07
| | | | | | | | | | | Purpose of commit: bugfixes Commit summary: --------------- Both of these fixes inspired by use with X based services. The first makes a TTY of the form hostname:0 work (if you specify a different separator with the module argument "fieldsep=". The second treats "" for a RHOST the same way it would treat a NULL value.
* Relevant BUGIDs: 533664Jan Rekorajski2002-05-07
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- keep well know behaviour of maxlogins default ('*') limit
* Relevant BUGIDs: 517743Andrew G. Morgan2002-05-07
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- pam_pwdb did it, so make pam_unix log when a passowrd is changed.
* Relevant BUGIDs: 530428Jan Rekorajski2002-03-15
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- pam_limits didn't the priority value specified in config.
* Relevant BUGIDs: 507379Andrew G. Morgan2002-02-08
| | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- there were some dangling file descriptors and unclear pass/fail properties of some of the password updating code in pam_unix. Bug report from Len Lattanzi.
* Relevant BUGIDs: 476981Andrew G. Morgan2002-02-08
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- properly recurse directories (fix from Nalin).
* Relevant BUGIDs: 493294Andrew G. Morgan2002-01-19
| | | | | | | | | | | | Purpose of commit: bugfix and document Commit summary: --------------- The login limit counting seemed to have its math incorrect. The default has been changed to the sane one, and a new module argument has been added "utmp_early" that returns the module to its old behavior. Thanks to Berend De Schouwe for getting to the bottom of this issue.
* Relevant BUGIDs: 486361Andrew G. Morgan2001-12-09
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- pam_unix is too generic a module to override the PAM_USER_PROMPT item. (More modifications to xsh to help me test this change.)
* Relevant BUGIDs: 490938Andrew G. Morgan2001-12-09
| | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- Added libpammodutil and link it with every module as its built. The issue here is that there is a lot of code that the various modules use in common, and this staic library can be used to help make this code more maintainable. I do not intend to make this library dynamic. Especially right now, as I want to be free to chop and change the API and don't want to deal with revision control and third party modules. This checkin makes the pam_rhost_auth module make some use of this new library. I don't intend to add support for any other module prior to releasing 0.76.
* Relevant BUGIDs: 485454Andrew G. Morgan2001-12-09
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- The malloc debugging stuff appears to have had a few residual issues that I've fixed (trying to resolve another checkin!).
* Relevant BUGIDs: 483959Steve Langasek2001-11-30
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- pam_unix: fix 'likeauth' to kill off the memory leak once and for all.
* Relevant BUGIDs: 483959, 113596Steve Langasek2001-11-27
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- * Restore pam_unix's handling of 'likeauth' argument to a known working state * prettify AUTH_RETURN macro * remove redundant argv checks in pam_sm_setcred()
* Relevant BUGIDs: 476957, 436053Andrew G. Morgan2001-11-27
| | | | | | | | | | | Purpose of commit: improved feature Commit summary: --------------- Replace the 'similar' function with a real distance algorithm. (From Harald Welte and Nalin). Also fix a typo that somehow slipped through an earlier checkin. [Bug 476947].
* Relevant BUGIDs: 476949Andrew G. Morgan2001-11-27
| | | | | | | | Purpose of commit: documentation fixes Commit summary: --------------- Fix some typos noted by Nalin.
* Relevant BUGIDs: 476934Andrew G. Morgan2001-11-27
| | | | | | | | | Purpose of commit: documentation fix Commit summary: --------------- Module doesn't understand 'console' but does understand 'LOCAL'. Fix from Nalin.
* Relevant BUGIDs: 483959Andrew G. Morgan2001-11-27
| | | | | | | | | Purpose of commit: fix memory leak Commit summary: --------------- Fernando Trias pointed out a silly memory leak in pam_unix.so. It looks like some allocated memory that is simply not needed for anything.
* Relevant BUGIDs: 476947Andrew G. Morgan2001-11-26
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- be more confident that strings are being initialized correctly from Nalin.
* Relevant BUGIDs: 484252Andrew G. Morgan2001-11-26
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- pam_userdb was not paying close enough attention to password comparisons. Bug report and fix from Vladimir Pastukhov.
* Relevant BUGIDs: 476985Andrew G. Morgan2001-11-13
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Nalin's fix to do a better job of not corrupting the lastlog file.
* Relevant BUGIDs: 476986Andrew G. Morgan2001-11-13
| | | | | | | | | Purpose of commit: new feature, cleanup Commit summary: --------------- patch from Nalin to support '+hostname' as equivalent to 'hostname'. fixed compiler warning by working out when to include header file.
* Relevant BUGIDs: 476938Andrew G. Morgan2001-11-12
| | | | | | | | Purpose of commit: cleanup Commit summary: --------------- removed a compiler warning (courtesy Nalin) and added a memory leak comment.
* Relevant BUGIDs: 476961Andrew G. Morgan2001-11-12
| | | | | | | | | Purpose of commit: comments Commit summary: --------------- Added some clarification comments to help explain why I'm rejecting bug 476961.
* Relevant BUGIDs: 460717Andrew G. Morgan2001-11-12
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- it seems there was a slight problem with md5 compatibility with respect to bigendian non-md5 hash support.
* Relevant BUGIDs: 476983Andrew G. Morgan2001-11-12
| | | | | | | | Purpose of commit: bugfixes Commit summary: --------------- lots of segfault potential removed. Nalin found the biggies.
* Relevant BUGIDs: 473034Andrew G. Morgan2001-11-12
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- pam_env was only coincidentally parsing environment variables correctly. Bug report from weichangyang of hotmail com.
* Relevant BUGIDs: 436057, 476970Andrew G. Morgan2001-11-11
| | | | | | | | Purpose of commit: cleanup Commit summary: --------------- general comment, make and include cleanup.
* Relevant BUGIDs: 476990Andrew G. Morgan2001-11-11
| | | | | | | | Purpose of commit: new feature Commit summary: --------------- support -ve process priorities (and include superuser in this feature)
* Relevant BUGIDs: 424315Andrew G. Morgan2001-11-11
| | | | | | | | Purpose of commit: cleanup Commit summary: --------------- keep cvs update's clean