/*- * Copyright (c) 2001-2003 Networks Associates Technology, Inc. * Copyright (c) 2004-2017 Dag-Erling Smørgrav * All rights reserved. * * This software was developed for the FreeBSD Project by ThinkSec AS and * Network Associates Laboratories, the Security Research Division of * Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 * ("CBOSS"), as part of the DARPA CHATS research program. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. The name of the author may not be used to endorse or promote * products derived from this software without specific prior written * permission. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. */ #ifdef HAVE_CONFIG_H # include "config.h" #endif #include #include "openpam_impl.h" const char *pam_err_name[PAM_NUM_ERRORS] = { [PAM_SUCCESS] = "PAM_SUCCESS", [PAM_OPEN_ERR] = "PAM_OPEN_ERR", [PAM_SYMBOL_ERR] = "PAM_SYMBOL_ERR", [PAM_SERVICE_ERR] = "PAM_SERVICE_ERR", [PAM_SYSTEM_ERR] = "PAM_SYSTEM_ERR", [PAM_BUF_ERR] = "PAM_BUF_ERR", [PAM_CONV_ERR] = "PAM_CONV_ERR", [PAM_PERM_DENIED] = "PAM_PERM_DENIED", [PAM_MAXTRIES] = "PAM_MAXTRIES", [PAM_AUTH_ERR] = "PAM_AUTH_ERR", [PAM_NEW_AUTHTOK_REQD] = "PAM_NEW_AUTHTOK_REQD", [PAM_CRED_INSUFFICIENT] = "PAM_CRED_INSUFFICIENT", [PAM_AUTHINFO_UNAVAIL] = "PAM_AUTHINFO_UNAVAIL", [PAM_USER_UNKNOWN] = "PAM_USER_UNKNOWN", [PAM_CRED_UNAVAIL] = "PAM_CRED_UNAVAIL", [PAM_CRED_EXPIRED] = "PAM_CRED_EXPIRED", [PAM_CRED_ERR] = "PAM_CRED_ERR", [PAM_ACCT_EXPIRED] = "PAM_ACCT_EXPIRED", [PAM_AUTHTOK_EXPIRED] = "PAM_AUTHTOK_EXPIRED", [PAM_SESSION_ERR] = "PAM_SESSION_ERR", [PAM_AUTHTOK_ERR] = "PAM_AUTHTOK_ERR", [PAM_AUTHTOK_RECOVERY_ERR] = "PAM_AUTHTOK_RECOVERY_ERR", [PAM_AUTHTOK_LOCK_BUSY] = "PAM_AUTHTOK_LOCK_BUSY", [PAM_AUTHTOK_DISABLE_AGING] = "PAM_AUTHTOK_DISABLE_AGING", [PAM_NO_MODULE_DATA] = "PAM_NO_MODULE_DATA", [PAM_IGNORE] = "PAM_IGNORE", [PAM_ABORT] = "PAM_ABORT", [PAM_TRY_AGAIN] = "PAM_TRY_AGAIN", [PAM_MODULE_UNKNOWN] = "PAM_MODULE_UNKNOWN", [PAM_DOMAIN_UNKNOWN] = "PAM_DOMAIN_UNKNOWN", [PAM_BAD_HANDLE] = "PAM_BAD_HANDLE", [PAM_BAD_ITEM] = "PAM_BAD_ITEM", [PAM_BAD_FEATURE] = "PAM_BAD_FEATURE", [PAM_BAD_CONSTANT] = "PAM_BAD_CONSTANT", }; const char *pam_err_text[PAM_NUM_ERRORS] = { [PAM_SUCCESS] = "Success", [PAM_OPEN_ERR] = "Failed to load module", [PAM_SYMBOL_ERR] = "Invalid symbol", [PAM_SERVICE_ERR] = "Error in service module", [PAM_SYSTEM_ERR] = "System error", [PAM_BUF_ERR] = "Memory buffer error", [PAM_CONV_ERR] = "Conversation failure", [PAM_PERM_DENIED] = "Permission denied", [PAM_MAXTRIES] = "Maximum number of tries exceeded", [PAM_AUTH_ERR] = "Authentication error", [PAM_NEW_AUTHTOK_REQD] = "New authentication token required", [PAM_CRED_INSUFFICIENT] = "Insufficient credentials", [PAM_AUTHINFO_UNAVAIL] = "Authentication information is unavailable", [PAM_USER_UNKNOWN] = "Unknown user", [PAM_CRED_UNAVAIL] = "Failed to retrieve user credentials", [PAM_CRED_EXPIRED] = "User credentials have expired", [PAM_CRED_ERR] = "Failed to set user credentials", [PAM_ACCT_EXPIRED] = "User account has expired", [PAM_AUTHTOK_EXPIRED] = "Password has expired", [PAM_SESSION_ERR] = "Session failure", [PAM_AUTHTOK_ERR] = "Authentication token failure", [PAM_AUTHTOK_RECOVERY_ERR] = "Failed to recover old authentication token", [PAM_AUTHTOK_LOCK_BUSY] = "Authentication token lock busy", [PAM_AUTHTOK_DISABLE_AGING] = "Authentication token aging disabled", [PAM_NO_MODULE_DATA] = "Module data not found", [PAM_IGNORE] = "Ignore this module", [PAM_ABORT] = "General failure", [PAM_TRY_AGAIN] = "Try again", [PAM_MODULE_UNKNOWN] = "Unknown module type", [PAM_DOMAIN_UNKNOWN] = "Unknown authentication domain", [PAM_BAD_HANDLE] = "Invalid PAM handle", [PAM_BAD_ITEM] = "Unrecognized or restricted item", [PAM_BAD_FEATURE] = "Unrecognized or restricted feature", [PAM_BAD_CONSTANT] = "Invalid constant", }; const char *pam_item_name[PAM_NUM_ITEMS] = { [PAM_SERVICE] = "PAM_SERVICE", [PAM_USER] = "PAM_USER", [PAM_TTY] = "PAM_TTY", [PAM_RHOST] = "PAM_RHOST", [PAM_CONV] = "PAM_CONV", [PAM_AUTHTOK] = "PAM_AUTHTOK", [PAM_OLDAUTHTOK] = "PAM_OLDAUTHTOK", [PAM_RUSER] = "PAM_RUSER", [PAM_USER_PROMPT] = "PAM_USER_PROMPT", [PAM_REPOSITORY] = "PAM_REPOSITORY", [PAM_AUTHTOK_PROMPT] = "PAM_AUTHTOK_PROMPT", [PAM_OLDAUTHTOK_PROMPT] = "PAM_OLDAUTHTOK_PROMPT", [PAM_HOST] = "PAM_HOST", }; const char *pam_facility_name[PAM_NUM_FACILITIES] = { [PAM_ACCOUNT] = "account", [PAM_AUTH] = "auth", [PAM_PASSWORD] = "password", [PAM_SESSION] = "session", }; const char *pam_control_flag_name[PAM_NUM_CONTROL_FLAGS] = { [PAM_BINDING] = "binding", [PAM_OPTIONAL] = "optional", [PAM_REQUIRED] = "required", [PAM_REQUISITE] = "requisite", [PAM_SUFFICIENT] = "sufficient", }; const char *pam_func_name[PAM_NUM_PRIMITIVES] = { [PAM_SM_AUTHENTICATE] = "pam_authenticate", [PAM_SM_SETCRED] = "pam_setcred", [PAM_SM_ACCT_MGMT] = "pam_acct_mgmt", [PAM_SM_OPEN_SESSION] = "pam_open_session", [PAM_SM_CLOSE_SESSION] = "pam_close_session", [PAM_SM_CHAUTHTOK] = "pam_chauthtok" }; const char *pam_sm_func_name[PAM_NUM_PRIMITIVES] = { [PAM_SM_AUTHENTICATE] = "pam_sm_authenticate", [PAM_SM_SETCRED] = "pam_sm_setcred", [PAM_SM_ACCT_MGMT] = "pam_sm_acct_mgmt", [PAM_SM_OPEN_SESSION] = "pam_sm_open_session", [PAM_SM_CLOSE_SESSION] = "pam_sm_close_session", [PAM_SM_CHAUTHTOK] = "pam_sm_chauthtok" }; const char *openpam_policy_path[] = { "/etc/pam.d/", "/etc/pam.conf", "/usr/local/etc/pam.d/", "/usr/local/etc/pam.conf", NULL }; const char *openpam_module_path[] = { #ifdef OPENPAM_MODULES_DIRECTORY OPENPAM_MODULES_DIRECTORY, #else "/usr/lib", "/usr/local/lib", #endif NULL };