summaryrefslogtreecommitdiff
path: root/modules
Commit message (Collapse)AuthorAge
* Relevant BUGIDs: 132880Andrew G. Morgan2001-02-22
| | | | | | | | | Purpose of commit: remainder of bugfix Commit summary: --------------- Somehow, this got left out of an earlier commit. This checkin completes the support for fixing bug 132880.
* Relevant BUGIDs: 133542Andrew G. Morgan2001-02-22
| | | | | | | | | Purpose of commit: support for glibc-2.2.2 Commit summary: --------------- This module needed another #include to support a recent spin of the glibc headers.
* Relevant BUGIDs: 132880Andrew G. Morgan2001-02-18
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- wasn't linking conv.o into the module.
* Relevant BUGIDs: 112540Andrew G. Morgan2001-02-11
| | | | | | | | | | | | | | | Purpose of commit: minor security bugfix Commit summary: --------------- Fixes for the password helper binaries. Before, there was no check that the password entered was actually that of the intended user being authenticated. Instead, the password was checked for the requesting user. While this disstinction sounds like a security hole, its actually not been a problem in practice. The helper binaries have only been used in the case that the application is not setuid-0 and as such even if an improper authentication succeeded, the application could not change its uid from that of the requesting user.
* Relevant BUGIDs: 131549Andrew G. Morgan2001-02-10
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Needed to link lastlog module with -lutil (on some systems).
* Relevant BUGIDs: 131601Andrew G. Morgan2001-02-10
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- On systems that have a separate libcrypt. This module needed to be linked against it.
* Relevant BUGIDs: 127561Andrew G. Morgan2001-01-21
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- non-default config file option fixes (module and in documentation).
* Relevant BUGIDs: 127700Andrew G. Morgan2001-01-20
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- ia64 support - it behaves like an alpha wrt md5, but then unsigned int is 32 bits everywhere(*) these days, so just remove the #ifdef nonsense.
* Relevant BUGIDs: 117434Andrew G. Morgan2001-01-20
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Appear to have left these fixes out with last commit to resolve 117434.
* Relevant BUGIDs: 126440Steve Langasek2000-12-21
| | | | | | | | Purpose of commit: portability bugfix Commit summary: --------------- Removed non-posix shell command from pam_filter Makefile.
* Relevant BUGIDs: 126431, 126423Steve Langasek2000-12-20
| | | | | | | | | | | | Purpose of commit: new feature / bugfix Commit summary: --------------- This changes the format of pam_unix log messages, per bug 126423. The change is extensive (every call to _log_err() now has an additional argument) but straightforward. These changes to the logging code incidentally fix the problem reported in bug 126431.
* Relevant BUGIDs: 126036Steve Langasek2000-12-18
| | | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Changes format of pam_unix 'authentication failure' log messages for purposes of consistency and clarity. Note that we do not log the 'user=' item in the case of an invalid username unless the audit flag is turned on. Note also that the way we currently log these failures isn't i18n-friendly. I imagine this will need correcting at some point in the future.
* Relevant BUGIDs: 125704, 124930Steve Langasek2000-12-13
| | | | | | | | | Purpose of commit: portable handling of utmp in pam_unix Commit summary: --------------- Fixes problem with PAM_getlogin() on Solaris (and hopefully other Unices), as per David Lee's report.
* Relevant BUGIDs: 117434Andrew G. Morgan2000-12-10
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- removed static variables from pam_tally - should be thread safe now.
* Relevant BUGIDs: 125022Andrew G. Morgan2000-12-08
| | | | | | | | Purpose of commit: copyright notice Commit summary: --------------- Added an original sources copyright notice to pam_access (from logdaemon).
* Relevant BUGIDs: 124397Jan Rekorajski2000-12-04
| | | | | | | | Purpose of commit: new feature Commit summary: --------------- * pam_mail - use PAM_PATH_MAILDIR as the location of mail spool
* Relevant BUGIDs: 124391Jan Rekorajski2000-12-04
| | | | | | | | Purpose of commit: cleanup Commit summary: --------------- * removed unnecessary CVS Log tags from all over the source
* Relevant BUGIDs: 124394Jan Rekorajski2000-12-04
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- * pam_tally - check for PAM_TTY if PAM_RHOST is not set when writing to faillog
* Relevant BUGIDs: 124386Jan Rekorajski2000-12-04
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- - fixed wrong definition of struct pam_module (was pam_wheel)
* Relevant BUGIDs: 124136Andrew G. Morgan2000-12-03
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Makefile dependencies pam_userdb did not compile on a Red Hat 5.2 system. It does now.
* Relevant BUGIDs: 124062Jan Rekorajski2000-12-01
| | | | | | | | | Purpose of commit: new feature Commit summary: --------------- add change_uid option to pam_limits, and set real uid only if this option is present
* Relevant BUGIDs: 123972Jan Rekorajski2000-11-30
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- set real uid to the user for who we set limits
* Relevant BUGIDs: 117450Andrew G. Morgan2000-11-26
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- removed static variables from pam_limits.
* Relevant BUGIDs: 112906Andrew G. Morgan2000-11-26
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- removed static variable from pam_wheel module.
* Relevant BUGIDs: 116076Andrew G. Morgan2000-11-26
| | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Added pam_time/pam_group fixes for infinite loop when reading '\\[^\n]' in their config files and also added support for '/'. The latter makes both of these modules support modern tty handling.
* Relevant BUGIDs: 123399Andrew G. Morgan2000-11-25
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- avoid possibility of SIGPIPE from helper binary non-invocation or early exit.
* Relevant BUGIDs: 115055Andrew G. Morgan2000-11-25
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- fixed the bogus logic in 'similiar' (renamed it to similar) and documented the new override argument: difignore.
* Relevant BUGIDs: 111927, 117240Andrew G. Morgan2000-11-25
| | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- Added accessconf= option to the module to override the default access.conf file. Feature request from Aldrin Martoq and Meelis Roos.
* Relevant BUGIDs: 119554Andrew G. Morgan2000-11-25
| | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- The pam_limits module did not allow support for a changed number of limits recognized by the kernel. Bug identified and resolved by Adam J. Richter of Yggdrasil.
* Relevant BUGIDs: task 15788, bugs 108297, 117476, 117474Andrew G. Morgan2000-11-19
| | | | | | | | | | | | | | Purpose of commit: autoconf support for Linux-PAM Commit summary: --------------- This is a merge of the autoconf support that was developed against a 0-72 branch. [Note, because CVS has some issues, this is actually only 95% of the actual commit. The other files were actually committed when the preparation branch Linux-PAM-0-73pre-autoconf was updated. Hopefully, this will complete the merge.]
* Relevant BUGIDs: task 15788, bugs 108297, 117476, 117474Andrew G. Morgan2000-11-19
| | | | | | | | | | Purpose of commit: merge in the autoconf stuff Commit summary: --------------- this is a merge of the 0-72 autoconf branch to something more up to date. This commit will be followed by merging this Linux-PAM-0-73pre-autoconf branch to the main trunk.
* Relevant BUGIDs: 116380Andrew G. Morgan2000-10-08
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- modules shouldn't be built with -lpam as it causes problems for first time installs.
* Relevant BUGIDs: 113596Andrew G. Morgan2000-09-05
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- The "likeauth" module argument did not work for pam_pwdb and pam_unix. This commit fixes it.
* Relevant BUGIDs: 113238Steve Langasek2000-08-31
| | | | | | | | | | | | Purpose of commit: bugfix to pam_unix Commit summary: --------------- Fixed case where pam_unix would segfault if the app's conversation function returned a null pointer as the password. Since a null pointer can never be a valid password unless the password file also has a null field (which we already check for), we now check for a valid pointer and return PAM_AUTH_ERR if we don't have one.
* Relevant BUGIDs: 111491Steve Langasek2000-08-09
| | | | | | | | | | Purpose of commit: bugfix for pam_shells under Solaris Commit summary: --------------- Solaris' C compiler doesn't seem to respect concatenation of strings in a function argument list. Changed arguments to _pam_log() in the pam_shells command to get around this.
* Relevant BUGIDs: 111035Steve Langasek2000-08-03
| | | | | | | | | | | Purpose of commit: bugfix to pam_unix_auth Commit summary: --------------- Fix for 'likeauth' handling in the pam_unix_auth module. If pam_setcred needs to return the same value as returned by pam_authenticate, malloc() space for this return value and pass its address to pam_set_data(). Also, changes pam_sm_setcred() so that it reads this value properly.
* Relevant BUGIDs: 108845Steve Langasek2000-07-04
| | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Fix to pam_unix password changing code: if the password file is locked, retry repeatedly to reduce the risk of leaving other authentication databases in an inconsistent state when we fail.
* Initial revisionAndrew G. Morgan2000-06-20