aboutsummaryrefslogtreecommitdiff
path: root/modules/pam_access/pam_access.c
Commit message (Collapse)AuthorAgeFilesLines
...
* Relevant BUGIDs:Tomas Mraz2009-02-251-79/+75
| | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2009-02-25 Tomas Mraz <t8m@centrum.cz> * xtests/access.conf: Add a line for name resolution test case. * xtests/tst-pam_access4.c (main): Set PAM_RHOST for testing the LOCAL keyword. Add a test case for name resolution. * modules/pam_access/pam_access.c (from_match): Move name resolution to network_netmask_match(). (network_netmask_match): Do a name resolution of the origin only if matching against a real network/netmask.
* Relevant BUGIDs:Thorsten Kukuk2008-04-211-6/+11
| | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-04-21 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_access/access.conf.5.xml: Document changed behavior of LOCAL keyword. * modules/pam_access/pam_access.c: Add from_remote_host to struct login_info to change behavior of LOCAL keyword: if PAM_RHOST is not set, LOCAL will be true.
* Relevant BUGIDs:Tomas Mraz2008-04-171-19/+19
| | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2008-04-17 Tomas Mraz <t8m@centrum.cz> * modules/pam_access/pam_access.c(myhostname): Removed function. (user_match): Supply hostname of the machine to the netgroup_match(). Use hostname from the loginfo instead of calling myhostname(). (pam_sm_authenticate): Call gethostname() to fill hostname in the loginfo.
* Relevant BUGIDs:Tomas Mraz2007-12-071-72/+98
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature and cleanup Commit summary: --------------- 2007-12-07 Tomas Mraz <t8m@centrum.cz> * libpam/libpam.map: Add LIBPAM_MODUTIL_1.1 version. * libpam/pam_audit.c: Add _pam_audit_open() and pam_modutil_audit_write(). (_pam_auditlog): Call _pam_audit_open(). * libpam/include/security/pam_modutil.h: Add pam_modutil_audit_write(). * modules/pam_access/pam_access.8.xml: Add noaudit option. Document auditing. * modules/pam_access/pam_access.c: Move fs, sep, pam_access_debug, and only_new_group_syntax variables to struct login_info. Add noaudit member. (_parse_args): Adjust for the move of variables and add support for noaudit option. (group_match): Add debug parameter. (string_match): Likewise. (network_netmask_match): Likewise. (login_access): Adjust for the move of variables. Add nonall_match. Add call to pam_modutil_audit_write(). (list_match): Adjust for the move of variables. (user_match): Likewise. (from_match): Likewise. (pam_sm_authenticate): Call _parse_args() earlier. * modules/pam_limits/pam_limits.8.xml: Add noaudit option. Document auditing. * modules/pam_limits/pam_limits.c (_pam_parse): Add noaudit option. (setup_limits): Call pam_modutil_audit_write(). * modules/pam_time/pam_time.8.xml: Add debug and noaudit options. Document auditing. * modules/pam_time/pam_time.c: Add option parsing (_pam_parse()). (check_account): Call _pam_parse(). Call pam_modutil_audit_write() and pam_syslog() on login denials.
* Relevant BUGIDs:Tomas Mraz2007-08-151-8/+8
| | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2007-08-15 Tomas Mraz <t8m@centrum.cz> * modules/pam_access/pam_access.c (list_match): Add explicit sptr argument for strtok_r, otherwise the code is not portable.
* Relevant BUGIDs:Thorsten Kukuk2007-06-251-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- 2007-06-25 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_access/pam_access.c (list_match): Use saveptr of strtok_r result for recursive calls. * xtests/Makefile.am: Add new pam_access test cases. * xtests/pam_access1.c: New test case. * xtests/pam_access2.c: Likewise. * xtests/pam_access3.c: Likewise. * xtests/pam_access4.c: Likewise. * xtests/pam_access1.sh: Wrapper to create user accounts. * xtests/pam_access2.sh: Likewise. * xtests/pam_access3.sh: Likewise. * xtests/pam_access4.sh: Likewise. * xtests/pam_access1.pamd: PAM config file for pam_access tests. * xtests/pam_access2.pamd: Likewise. * xtests/pam_access3.pamd: Likewise. * xtests/pam_access4.pamd: Likewise. * xtests/access.conf: Config file for pam_access tests. * xtests/run-tests.sh: Install access.conf into system.
* Relevant BUGIDs: 411390Thorsten Kukuk2007-06-221-6/+43
| | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2007-06-22 Thorsten Kukuk <kukuk@thkukuk.de> * modules/pam_access/pam_access.c: Add new syntax for groups in access.conf to differentiate group names from account names. Based on patch from Julien Lecomte <julien@famille-lecomte.net>, solves feature request [#411390]. * modules/pam_access/access.conf: Add example for new group syntax. * modules/pam_access/access.conf.5.xml: Document new syntax.
* Relevant BUGIDs:Tomas Mraz2007-03-291-5/+8
| | | | | | | | | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- 2007-03-29 Tomas Mraz <t8m@centrum.cz> * modules/pam_access/pam_access.c (login_access, list_match): Replace strtok with strtok_r. * modules/pam_cracklib/pam_cracklib.c (check_old_password): Likewise. * modules/pam_ftp/pam_ftp.c (lookup, pam_authenticate): Likewise. * modules/pam_unix/pam_unix_passwd.c (check_old_password, save_old_password): Likewise.
* Relevant BUGIDs:Tomas Mraz2006-08-301-3/+26
| | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2006-08-30 Tomas Mraz <t8m@centrum.cz> * modules/pam_access/pam_access.8.xml: All services supported. * modules/pam_access/pam_access.c (pam_sm_open_session): New. (pam_sm_close_session): New. (pam_sm_chauthtok): New. * modules/pam_access/pam_succeed_if.8.xml: All services supported. * modules/pam_access/pam_succeed_if.c (pam_sm_setcred): Return PAM_IGNORE rather than success. (pam_sm_open_session): New. (pam_sm_close_session): New. (pam_sm_chauthtok): New.
* Relevant BUGIDs:Tomas Mraz2006-07-031-4/+4
| | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- * configure.in: Fixed have_key_syscalls test. * modules/pam_access/pam_access.c (from_match): Fixed IPv4 network match, removed AI_ADDRCONFIG flag.
* Relevant BUGIDs:Thorsten Kukuk2006-02-071-72/+414
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- 2006-02-07 Thorsten Kukuk <kukuk@thkukuk.de> * configure.in: Check for text browser. * Make.xml.rules: Add rule to generate README from README.xml. * modules/pam_access/Makefile.am: Include Make.xml.rules. * modules/pam_access/README: Regenerated from README.xml. * modules/pam_access/README.xml: New. * modules/pam_access/access.conf: Extended by new examples. * modules/pam_access/access.conf.5: New, generated from xml file. * modules/pam_access/access.conf.5.xml: New. * modules/pam_access/pam_access.8: New, generated from xml file. * modules/pam_access/pam_access.8.xml: New. * modules/pam_access/pam_access.c: Add rules for IPv6 and netmasks. Based on patch from Mike Becher <Mike.Becher@lrz-muenchen.de>. * modules/pam_deny/Makefile.am: Include Make.xml.rules. * modules/pam_deny/pam_deny.8.xml: New. * modules/pam_deny/pam_deny.8: New, generated from xml file. * modules/pam_deny/README.xml: New. * modules/pam_deny/README: Regenerated from xml file. * modules/pam_cracklib/Makefile.am: Include Make.xml.rules. * modules/pam_cracklib/pam_cracklib.8.xml: New. * modules/pam_cracklib/pam_cracklib.8: New, generated from xml file. * modules/pam_cracklib/README.xml: New. * modules/pam_cracklib/README: Regenerated from xml file. * modules/pam_exec/Makefile.am: Add rule to generate README. * modules/pam_exec/README: Regenerated from xml file. * modules/pam_exec/pam_exec.8: Regenerated from xml file. * modules/pam_exec/pam_exec.8.xml: Syntax files.
* Relevant BUGIDs: 562730, 435990Tomas Mraz2005-11-091-5/+7
| | | | | | | | | | | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- * modules/pam_access/pam_access.c (pam_sm_acct_mgmt): Parse correctly full path tty name. * modules/pam_time/pam_time.c (pam_sm_acct_mgmt): Parse correctly full path tty name. Allow unset tty. (logic_member): Allow matching ':' in tty name. * modules/pam_group/pam_group.c (pam_sm_acct_mgmt): Parse correctly full path tty name. Allow unset tty. (logic_member): Allow matching ':' in tty name. * libpam_misc/misc_conv.c (read_string): Read only up to EOL if stdin is not terminal.
* Relevant BUGIDs:Tomas Mraz2005-09-261-14/+19
| | | | | | | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- Support for NULL tty for pam_access. 2005-09-23 Tomas Mraz <t8m@centrum.cz> * modules/pam_access/pam_access.c (from_match): Support NULL from. (string_match): Support NULL string, add NONE keyword matching it. (pam_sm_acct_mgmt): Don't fail when ttyname returns NULL. * modules/pam_access/access.conf: NONE keyword description * modules/pam_access/README: NONE keyword description
* Relevant BUGIDs:Tomas Mraz2005-09-211-3/+3
| | | | | | | | Purpose of commit: new feature Commit summary: --------------- Moved functions from pammodutil to libpam.
* Relevant BUGIDs: noneThorsten Kukuk2005-09-181-12/+1
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Code cleanup (pam_syslog, compiler warnings)
* Relevant BUGIDs: noneThorsten Kukuk2005-09-031-30/+25
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Replace _log_err with pam_syslog
* Relevant BUGIDs: noneThorsten Kukuk2005-08-161-14/+9
| | | | | | | | | Purpose of commit: new feature Commit summary: --------------- Big "automake/autoconf/libtool" commit
* Relevant BUGIDs: noneThorsten Kukuk2005-07-201-1/+1
| | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Rename _pam_aconf.h to config.h.
* Relevant BUGIDs: noneThorsten Kukuk2005-06-091-14/+20
| | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Fix all occurrence of dereferencing type-punned pointer will break strict-aliasing rules warnings
* Relevant BUGIDs:Tomas Mraz2005-05-271-1/+6
| | | | | | | | | Purpose of commit: new feature Commit summary: --------------- * pam_access: Add listsep option to set list element separator by Richard Shaffer
* Applied debian patchesSebastien Tricaud2004-11-161-5/+8
|
* Relevant BUGIDs:Thorsten Kukuk2004-09-241-34/+34
| | | | | | | | | | Purpose of commit: Commit summary: --------------- bugfix: 440107: Add various patches from Linux Distibutors to make PAM modules reentrant.
* Relevant BUGIDs:Thorsten Kukuk2004-09-151-34/+28
| | | | | | | | | Purpose of commit: Commit summary: --------------- bugfix: Add parts of Steve Grubb's resource leak and other fixes
* Relevant BUGIDs:Thorsten Kukuk2004-09-141-6/+2
| | | | | | | | | Purpose of commit: Commit summary: --------------- bugfix: merge with BerliOS
* Relevant BUGIDs: 415423Andrew G. Morgan2002-06-271-2/+0
| | | | | | | | | | Purpose of commit: cleanup Commit summary: --------------- Shouldn't explicitly include prototype in the file - it conflicts with common defaults and thus should not be there. (Request for removal from David Lee.)
* Relevant BUGIDs: 547051, 547521Andrew G. Morgan2002-05-071-3/+8
| | | | | | | | | | | Purpose of commit: bugfixes Commit summary: --------------- Both of these fixes inspired by use with X based services. The first makes a TTY of the form hostname:0 work (if you specify a different separator with the module argument "fieldsep=". The second treats "" for a RHOST the same way it would treat a NULL value.
* Relevant BUGIDs: 419631Andrew G. Morgan2001-05-011-4/+5
| | | | | | | | | Purpose of commit: bugfix Commit summary: --------------- Bring the module in to line with its documentation. The README refers to a trailing '.' on IP addresses.
* Relevant BUGIDs: 127561Andrew G. Morgan2001-01-211-10/+12
| | | | | | | | Purpose of commit: bugfix Commit summary: --------------- non-default config file option fixes (module and in documentation).
* Relevant BUGIDs: 125022Andrew G. Morgan2000-12-081-0/+18
| | | | | | | | Purpose of commit: copyright notice Commit summary: --------------- Added an original sources copyright notice to pam_access (from logdaemon).
* Relevant BUGIDs: 111927, 117240Andrew G. Morgan2000-11-251-33/+81
| | | | | | | | | | Purpose of commit: new feature Commit summary: --------------- Added accessconf= option to the module to override the default access.conf file. Feature request from Aldrin Martoq and Meelis Roos.
* Relevant BUGIDs: task 15788, bugs 108297, 117476, 117474Andrew G. Morgan2000-11-191-5/+6
| | | | | | | | | | | | | | Purpose of commit: autoconf support for Linux-PAM Commit summary: --------------- This is a merge of the autoconf support that was developed against a 0-72 branch. [Note, because CVS has some issues, this is actually only 95% of the actual commit. The other files were actually committed when the preparation branch Linux-PAM-0-73pre-autoconf was updated. Hopefully, this will complete the merge.]
* Initial revisionAndrew G. Morgan2000-06-201-0/+424
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-18 22:20:43 +0000