src-test2/lib/libpam, branch releng/7.3

Fix a problem whereby a corrupt DNS record can cause named to crash. [11:06]

2011-12-23T15:00:37Z

Add an API for alerting internal libc routines to the presence of "unsafe" paths post-chroot, and use it in ftpd. [11:07] Fix a buffer overflow in telnetd. [11:08] Make pam_ssh ignore unpassphrased keys unless the "nullok" option is specified. [11:09] Add sanity checking of service names in pam_start. [11:10] Approved by: so (cperciva) Approved by: re (bz) Security: FreeBSD-SA-11:06.bind Security: FreeBSD-SA-11:07.chroot Security: FreeBSD-SA-11:08.telnetd Security: FreeBSD-SA-11:09.pam_ssh Security: FreeBSD-SA-11:10.pam

MFC: OpenPAM Hydrangea

2008-01-18T13:29:05Z

MFC: (1.10) correct documentation of ~/.opiealways

2008-01-18T13:28:24Z

PR: 117512

MFC: Added MK_INSTALLLIB support and fixed usr.bin/lex/lib/Makefile

2007-10-23T15:41:34Z

in case of installing with WITHOUT_INSTALLLIB (e.g. in nanobsd(8)). PR: bin/114200 Approved by: re (kensmith)

Apply the same error checks to PAM_TTY in pam_sm_close_session() as in

2007-07-22T15:17:29Z

pam_sm_open_session(), avoiding false negatives when no tty is present. Submitted by: Todd C. Miller Approved by: re (rwatson) MFC after: 2 weeks

Whitespace cleanup

2007-07-22T15:14:40Z

Approved by: re (rwatson)

- Bump share library version which were missed in last bump

2007-06-18T18:47:54Z

Reported by: jhb Discussed with: deischen, des, doubg, harti Approved by: re (kensmith)

Use the current user's login class for the decisions about where

2007-06-14T13:07:06Z

the nologin(5) file is located and whether the user may bypass its restriction. Add some error checks. Approved by: des PR: bin/107612

Now pam_nologin(8) will provide an account management function

2007-06-10T18:57:20Z

instead of an authentication function. There are a design reason and a practical reason for that. First, the module belongs in account management because it checks availability of the account and does no authentication. Second, there are existing and potential PAM consumers that skip PAM authentication for good or for bad. E.g., sshd(8) just prefers internal routines for public key auth; OTOH, cron(8) and atrun(8) do implicit authentication when running a job on behalf of its owner, so their inability to use PAM auth is fundamental, but they can benefit from PAM account management. Document this change in the manpage. Modify /etc/pam.d files accordingly, so that pam_nologin.so is listed under the "account" function class. Bump __FreeBSD_version (mostly for ports, as this change should be invisible to C code outside pam_nologin.) PR: bin/112574 Approved by: des, re

Re-add support for NIS netgroups (heavily modified from patch in PR)

2007-05-25T07:50:18Z

PR: bin/112955 Submitted by: A. Blake Cooper MFC after: 3 weeks