src-test2/lib/libpam/modules, branch release/7.2.0_cvs

Copy releng/7.2 to release/7.2.0 for FreeBSD 7.2-RELEASE.

2009-05-01T02:51:58Z

Approved by: re (implicit) This commit was manufactured to restore the state of the 7.2-RELEASE image.

MFC: OpenPAM Hydrangea

2008-01-18T13:29:05Z

MFC: (1.10) correct documentation of ~/.opiealways

2008-01-18T13:28:24Z

PR: 117512

MFC: Added MK_INSTALLLIB support and fixed usr.bin/lex/lib/Makefile

2007-10-23T15:41:34Z

in case of installing with WITHOUT_INSTALLLIB (e.g. in nanobsd(8)). PR: bin/114200 Approved by: re (kensmith)

Apply the same error checks to PAM_TTY in pam_sm_close_session() as in

2007-07-22T15:17:29Z

pam_sm_open_session(), avoiding false negatives when no tty is present. Submitted by: Todd C. Miller Approved by: re (rwatson) MFC after: 2 weeks

Whitespace cleanup

2007-07-22T15:14:40Z

Approved by: re (rwatson)

Use the current user's login class for the decisions about where

2007-06-14T13:07:06Z

the nologin(5) file is located and whether the user may bypass its restriction. Add some error checks. Approved by: des PR: bin/107612

Now pam_nologin(8) will provide an account management function

2007-06-10T18:57:20Z

instead of an authentication function. There are a design reason and a practical reason for that. First, the module belongs in account management because it checks availability of the account and does no authentication. Second, there are existing and potential PAM consumers that skip PAM authentication for good or for bad. E.g., sshd(8) just prefers internal routines for public key auth; OTOH, cron(8) and atrun(8) do implicit authentication when running a job on behalf of its owner, so their inability to use PAM auth is fundamental, but they can benefit from PAM account management. Document this change in the manpage. Modify /etc/pam.d files accordingly, so that pam_nologin.so is listed under the "account" function class. Bump __FreeBSD_version (mostly for ports, as this change should be invisible to C code outside pam_nologin.) PR: bin/112574 Approved by: des, re

Re-add support for NIS netgroups (heavily modified from patch in PR)

2007-05-25T07:50:18Z

PR: bin/112955 Submitted by: A. Blake Cooper MFC after: 3 weeks

In account management, verify whether the account has been locked

2007-03-27T09:59:15Z

with `pw lock', so that it's impossible to log into a locked account using an alternative authentication mechanism, such as an ssh key. This change affects only accounts locked with pw(8), i.e., having a `*LOCKED*' prefix in their password hash field, so people still can use a different pattern to disable password authentication only. Mention all account management criteria in the manpage. Approved by: maintainer (timeout) PR: bin/71147 MFC after: 1 month