Commit graph

86 commits

Author SHA1 Message Date
Dag-Erling Smørgrav ed3d5a8522 DBA update and minor whitespace fixes.
git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@157 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-06-07 18:22:57 +00:00
Dag-Erling Smørgrav f414e56812 Split the summar page in two (one for the standard API, one for
extensions).  Also add a page about the conversation system, and
remove that information from the pam_start page.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@153 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-05-28 00:58:47 +00:00
Dag-Erling Smørgrav 70792385d0 Conditionalize debugging messages in !STDC, !GNUC case.
git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@151 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-05-24 15:04:27 +00:00
Dag-Erling Smørgrav 859840dd61 GCC 3 is upon us.
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@147 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-05-24 14:27:09 +00:00
Dag-Erling Smørgrav 6013f825ec Add documentation.
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@145 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-05-09 19:52:55 +00:00
Dag-Erling Smørgrav 082364c255 Initialize other to all-zeroes before using it.
git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@142 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-05-03 14:55:03 +00:00
Dag-Erling Smørgrav 472018b4e5 Fall in line with Solaris and Linux-PAM wrt use of the "other" policy:
use it to fill the gaps in incomplete policies as well as to replace
missing ones.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@137 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-05-02 06:08:02 +00:00
Dag-Erling Smørgrav 2cc6bad9fc Don't reference vpath after it's been freed.
git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@136 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-24 22:50:40 +00:00
Dag-Erling Smørgrav c1bd6712a0 Add colons so gendoc recognizes this as a list rather than a literal
section.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@132 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-17 23:51:34 +00:00
Dag-Erling Smørgrav c51f824179 Set rsp to NULL before calling the conversation function, so we can
later detect if it hasn't been touched.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@130 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-17 07:26:16 +00:00
Dag-Erling Smørgrav ad8d33ef88 Add a null conversation function.
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@129 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-17 06:46:51 +00:00
Dag-Erling Smørgrav 2d7706551f Additional debugging messages.
git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@127 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-15 08:30:42 +00:00
Dag-Erling Smørgrav eeab6a40c4 Don't copy log messages to stderr, even #ifdef DEBUG.
git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@125 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-15 08:28:43 +00:00
Dag-Erling Smørgrav b055d19eda Print a newline after an error or info message.
git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@124 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-15 03:26:55 +00:00
Dag-Erling Smørgrav 2dc37c7bb2 Fix highly embarassing typo. This makes a good argument for using
verbose variable names.


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@122 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-15 02:31:56 +00:00
Dag-Erling Smørgrav 61c8a26c60 More checks & documentation, and fix some markup nits.
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@115 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-14 20:22:20 +00:00
Dag-Erling Smørgrav 2b0fbefd4a Move the policy-loading code into a separate file.
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@112 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-12 20:27:47 +00:00
Dag-Erling Smørgrav 56aafe38c0 Add openpam_{borrow,restore}_cred() (for temporarily switching to
user credentials) and openpam_free_data() (generic cleanup function
for pam_set_data() consumers)

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@106 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-08 13:42:13 +00:00
Dag-Erling Smørgrav ff571b036c If PAM_OLDAUTHTOK is set, we're asked for PAM_AUTHTOK, and we have
to prompt the user, prompt her twice and compare the responses.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@105 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-06 21:23:26 +00:00
Dag-Erling Smørgrav c7010177aa Check flags carefully, and add documentation.
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@102 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-06 17:41:37 +00:00
Dag-Erling Smørgrav c9f74afc91 Plug memory leak, reduce differences between these very similar
functions, and {add,tweak} documentation.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@101 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-06 17:17:44 +00:00
Dag-Erling Smørgrav 1eafe40ac3 Change pam_get_authtok()'s prototype so the caller can specify
what token it wants.  Also introduce PAM_OLDAUTHTOK_PROMPT.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@100 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-06 17:05:21 +00:00
Dag-Erling Smørgrav 6a52d30938 Allocate the correct amount of memory for the environment list
(forgot to multiply by sizeof(char *)).

Submitted by:	Takanori Saneto <sanewo@ba2.so-net.ne.jp>


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@99 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-02 22:47:12 +00:00
Dag-Erling Smørgrav 8113558d3a Fix braino that arose from confusion between data and dp. This
unbreaks the pam_ldap module.

Based on a patch by Joe Marcus Clarke <marcus@marcuscom.com>.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@98 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-04-01 14:13:56 +00:00
Dag-Erling Smørgrav 87b5599651 Suppress debug logs unless DEBUG is defined.
Sponsored by:	DARPA, NAI Labs.


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@95 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-03-14 20:54:16 +00:00
Dag-Erling Smørgrav 70efc25d1c Fix a number of bugs in the module cache:
- Don't log dlopen() failures, since they're rarely interesting;
   instead, log a failure if no module was found at all.

 - When loading  a versioned module, store its logical name in the
   module structure rather than its physical name, since it will be
   looked up by its logical name if it's needed again.

 - Initialize module->next->prev when adding a module to the cache.

 - Set modules to NULL when releasing the last module in the cache.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@94 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-03-07 20:22:38 +00:00
Dag-Erling Smørgrav 8c639c01ef s/Technologies/Technology/ in copyright, and regenerate docs.
git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@93 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-03-07 18:12:45 +00:00
Dag-Erling Smørgrav f2bc37d0d6 s/PAM_REINITIALISE_CRED/PAM_REINITIALIZE_CRED/
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@92 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-03-07 13:09:46 +00:00
Dag-Erling Smørgrav 321d3cfb35 Add missing #include <string.h>
git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@91 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-03-07 12:57:35 +00:00
Dag-Erling Smørgrav 676eb4cd21 Correct markup nit.
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@88 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-03-05 14:37:04 +00:00
Dag-Erling Smørgrav b61ca53417 Move most of the dynamic loader code into a separate file, and add
support for module versioning.  OpenPAM will prefer a PAM module with
the same version number as the library itself to one with no version
number at all.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@87 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-03-05 14:20:26 +00:00
Dag-Erling Smørgrav 6f75ed6572 $Id$ -> $P4$ + regenerate man pages.
git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@86 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-26 04:05:19 +00:00
Dag-Erling Smørgrav 7a936aa997 I was a little quick when I originally wrote this: the code only
supported setting new options.  Add support for unsetting options
and changing the value of existing options.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@85 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-25 17:37:00 +00:00
Dag-Erling Smørgrav 6f078f6f97 Clear PAM_AUTHTOK after running the service modules.
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@82 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-23 18:07:30 +00:00
Dag-Erling Smørgrav 8ea571eeba - pam_sm_chauthtok() can return PAM_TRY_AGAIN.
- "sufficient" should not terminate the chain if the PAM_PRELIM_CHECK
  flag is set.

Sponsored by: DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@81 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-23 18:06:45 +00:00
Dag-Erling Smørgrav ffabf53a8c Document PAM_TRY_AGAIN as a valid return value (cf. XSSO pp. 72-73)
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@80 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-23 18:03:53 +00:00
Dag-Erling Smørgrav 274583fefd Whitespace nit.
git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@76 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-22 22:04:30 +00:00
Dag-Erling Smørgrav 2d71f7049b Respect echo_pass, try_first_pass, use_first_pass options.
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@75 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-22 22:04:11 +00:00
Dag-Erling Smørgrav 5c3fadae16 Add openpam_get_option() and openpam_set_option().
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@74 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-22 21:33:49 +00:00
Dag-Erling Smørgrav 4b5df4ce1a Mask signals while prompting the user (except for SIGINT and SIGTSTP),
and add timeout functionality (defaults to off).

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@72 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-22 20:35:00 +00:00
Dag-Erling Smørgrav 3fab86788d Oops, don't build openpam_static() unless OPENPAM_STATIC_MODULES is
defined.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@71 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-20 15:35:17 +00:00
Dag-Erling Smørgrav 8c45582bf1 Move the linker set stuff into a separate file, and rename the
linker set for cosmetic reasons.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@70 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-20 15:33:11 +00:00
Dag-Erling Smørgrav 242138f031 Move PAM_NUM_ITEMS from openpam_impl.h to pam_constants.h so it
doesn't go stale again.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@69 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-20 15:26:40 +00:00
Dag-Erling Smørgrav 3d506282e3 Allow the PAM_AUTHTOK_PROMPT item to override the prompt specified by
the module.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@68 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-20 15:22:09 +00:00
Dag-Erling Smørgrav 246b7f5d29 Terminate the environment list, and log the number of variables.
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@67 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-20 00:22:14 +00:00
Dag-Erling Smørgrav 645c7270fc Add in-line documentation. Some functions still lack descriptions.
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@63 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-18 19:31:10 +00:00
Dag-Erling Smørgrav 6b7c9e3837 The proper use of PAM_SYMBOL_ERR is to indicate an invalid argument
to pam_[gs]et_item(3).

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@61 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-18 12:26:17 +00:00
Dag-Erling Smørgrav 849893fd10 Log allocation failures.
Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@60 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-13 13:21:37 +00:00
Dag-Erling Smørgrav c7df899506 Check *authtok - pam_get_item(3) will succeed even if the item is
NULL.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@58 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-13 02:19:05 +00:00
Dag-Erling Smørgrav 105c3d4de7 pam_get_item(3) expects a const void **, not a const void *. Also
check that the pam_conv structure it returns is not NULL.

Sponsored by:	DARPA, NAI Labs


git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@57 185d5e19-27fe-0310-9dcf-9bff6b9f3609
2002-02-13 02:17:31 +00:00