src-test/lib/libpam, branch main

Don't explicitly specify c99 or gnu99 as the default is now gnu99.

2020-08-17T05:57:02Z

MFC after: 2 weeks

Apply tentative fix for clang 11 warning in pam_exec(8):

2020-08-06T19:31:52Z

lib/libpam/modules/pam_exec/pam_exec.c:222:56: error: format specifies type 'char *' but the argument has type 'const void *' [-Werror,-Wformat] if (asprintf(&envstr, "%s=%s", pam_item_env[i].name, item) < 0) ~~ ^~~~

pkgbase: Move telnetd and ftpd pam file to the utilities package

2020-03-24T01:08:06Z

Both programs are in this package so put the pam.d file in there too. Reported by: emaste Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D24161

This commit makes significant changes to pam_login_access(8) to bring it

2020-02-18T11:27:08Z

up to par with the Linux pam_access(8). Like the Linux pam_access(8) our pam_login_access(8) is a service module for pam(3) that allows a administrator to limit access from specified remote hosts or terminals. Unlike the Linux pam_access, pam_login_access is missing some features which are added by this commit: Access file can now be specified. The default remains /etc/access.conf. The syntax is consistent with Linux pam_access. By default usernames are matched. If the username fails to match a match against a group name is attempted. The new nodefgroup module option will only match a username and no attempt to match a group name is made. Group names must be specified in brackets, "()" when nodefgroup is specified. Otherwise the old backward compatible behavior is used. This is consistent with Linux pam_access. A new field separator module option allows the replacement of the default colon (:) with any other character. This facilitates potential future specification of X displays. This is also consistent with Linux pam_access. A new list separator module option to replace the default space/comma/tab with another character. This too is consistent with Linux pam_access. Linux pam_access options not implemented in this commit are the debug and audit options. These will be implemented at a later date. Reviewed by: bjk, bcr (for manpages) Approved by: des (blanket, implicit) MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D23198

strchr() returns a pointer not an int.

2020-02-18T11:27:05Z

Reported by: bjk Approved by: des (blanket, implicit) MFC after: 3 days

Add missing SYNOPSIS section.

2020-02-18T11:27:02Z

Reported by: ports/textproc/igor MFC after: 3 days

There is no pam(8) man page, it is pam(3).

2020-02-18T11:26:59Z

Approved by: des (implicit, blanket) MFC after: 3 days

When pam_login_access(5) fails to match a username it attempts to

2020-02-18T11:26:56Z

match the primary group a user belongs to. This commit extends the match to secondary groups a user belongs to as well, just as the Linux pam_access(5) does. Approved by: des (implicit, blanket)

The words ALL, LOCAL, and EXCEPT have special meaning and are documented

2020-02-18T11:26:52Z

as in the login.access(5) man page. However strcasecmp() is used to compare for these special strings. Because of this User accounts and groups with the corresponding lowercase names are misintrepreted to have special whereas they should not. This commit fixes this, conforming to the man page and to how the Linux pam_access(8) handles these special words. Approved by: des (implicit, blanket)

Update Makefile.depend files

2019-12-11T17:37:53Z

Update a bunch of Makefile.depend files as a result of adding Makefile.depend.options files Reviewed by: bdrewery MFC after: 1 week Sponsored by: Juniper Networks Differential Revision: https://reviews.freebsd.org/D22494