1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
/* pam_faildelay module */
/*
* Allows an admin to set the delay on failure per-application.
* Provides "auth" interface only.
*
* Use by putting something like this in the relevant pam config:
* auth required pam_faildelay.so delay=[microseconds]
*
* eg:
* auth required pam_faildelay.so delay=10000000
* will set the delay on failure to 10 seconds.
*
*
* Based on pam_rootok and parts of pam_unix both by Andrew Morgan
* <morgan@linux.kernel.org>
*
* Portions Copyright (c) 2005 Darren Tucker <dtucker at zip com au>.
*
* Redistribution and use in source and binary forms of, with
* or without modification, are permitted provided that the following
* conditions are met:
*
* 1. Redistributions of source code must retain any existing copyright
* notice, and this entire permission notice in its entirety,
* including the disclaimer of warranties.
*
* 2. Redistributions in binary form must reproduce all prior and current
* copyright notices, this list of conditions, and the following
* disclaimer in the documentation and/or other materials provided
* with the distribution.
*
* 3. The name of any author may not be used to endorse or promote
* products derived from this software without their specific prior
* written permission.
*
* ALTERNATIVELY, this product may be distributed under the terms of the
* GNU General Public License, in which case the provisions of the GNU
* GPL are required INSTEAD OF the above restrictions. (This clause is
* necessary due to a potential conflict between the GNU GPL and the
* restrictions contained in a BSD-style copyright.)
*
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
* WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
* IN NO EVENT SHALL THE AUTHOR(S) BE LIABLE FOR ANY DIRECT, INDIRECT,
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
* BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
* OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
* ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR
* TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
* USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
* DAMAGE.
*/
#include "config.h"
#include <stdio.h>
#include <unistd.h>
#include <syslog.h>
#include <string.h>
#define PAM_SM_AUTH
#include <security/pam_modules.h>
#include <security/pam_ext.h>
/* --- authentication management functions (only) --- */
PAM_EXTERN
int pam_sm_authenticate(pam_handle_t *pamh, int flags UNUSED,
int argc, const char **argv)
{
int i, debug_flag = 0;
long int delay = 0;
/* step through arguments */
for (i = 0; i < argc; i++) {
if (sscanf(argv[i], "delay=%ld", &delay) == 1) {
/* sscanf did already everything necessary */
} else if (strcmp (argv[i], "debug") == 0)
debug_flag = 1;
else
pam_syslog (pamh, LOG_ERR, "unknown option; %s", argv[i]);
}
if (debug_flag)
pam_syslog (pamh, LOG_DEBUG, "setting fail delay to %ld", delay);
i = pam_fail_delay(pamh, delay);
if (i == PAM_SUCCESS)
return PAM_IGNORE;
else
return i;
}
PAM_EXTERN
int pam_sm_setcred(pam_handle_t *pamh UNUSED, int flags UNUSED,
int argc UNUSED, const char **argv UNUSED)
{
return PAM_IGNORE;
}
#ifdef PAM_STATIC
/* static module data */
struct pam_module _pam_rootok_modstruct = {
"pam_faildelay",
pam_sm_authenticate,
pam_sm_setcred,
NULL,
NULL,
NULL,
NULL,
};
#endif
/* end of module definition */
|
