summaryrefslogtreecommitdiff
path: root/lib/libpam
Commit message (Collapse)AuthorAgeFilesLines
* MFC:Yaroslav Tykhiy2006-03-113-8/+5
| | | | | | | | | | | Now login.access(5) feature belongs to pam_login_access(8), not to login(1), unlike it used to. This appears to apply to RELENG_5, too. Approved by: re (mux) Notes: svn path=/stable/5/; revision=156564
* MFC v1.15, Add -D_FREEFALL_CONFIG to CFLAGS via Makefile so that justKen Smith2005-07-111-0/+1
| | | | | | | | defining _FREEFALL_CONFIG in /etc/make.conf is all that is required for the clusterisms to take effect. Notes: svn path=/stable/5/; revision=147927
* MFC: (1.23) don't use cast as lvalue; make it obvious we don't support IPv6Dag-Erling Smørgrav2005-06-201-3/+3
| | | | Notes: svn path=/stable/5/; revision=147497
* MFC: NI_WITHSCOPEID cleanupHajimu UMEMOTO2005-05-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | contrib/tcp_wrappers/hosts_access.c: 1.5 contrib/tcp_wrappers/socket.c: 1.8 contrib/telnet/telnetd/telnetd.c: 1.28 lib/libc/net/rcmd.c: 1.41 lib/libc/net/res_send.c: 1.50 lib/libpam/modules/pam_unix/pam_unix.c: 1.50 lib/libutil/logwtmp.c: 1.20 lib/libutil/realhostname.c: 1.18 libexec/rlogind/rlogind.c: 1.44 libexec/tftpd/tftpd.c: 1.36 release/picobsd/tinyware/login/pico-login.c: 1.6 sbin/ifconfig/af_inet6.c: 1.2 sbin/route/route.c: 1.78 usr.bin/netstat/route.c: 1.76 usr.sbin/inetd/inetd.c: 1.129 usr.sbin/lpr/common_source/net.c: 1.9 usr.sbin/lpr/lpd/lpd.c: 1.41 usr.sbin/mountd/mountd.c: 1.81 usr.sbin/ppp/ncpaddr.c: 1.16 usr.sbin/rip6query/rip6query.c: 1.7 usr.sbin/syslogd/syslogd.c: 1.143 Notes: svn path=/stable/5/; revision=146707
* Record the freebsd.org cluster's configs to aid 5.x conversion. ForPeter Wemm2005-05-042-0/+7
| | | | | | | | | pam_krb5: * disable pam_setcred, it fails very noisily on the cluster * disable WARNS for the now-unused things from the first item Notes: svn path=/stable/5/; revision=145878
* MFC: For variables that are only checked with defined(), don't provideDavid E. O'Brien2005-02-132-4/+4
| | | | | | | any fake value. Notes: svn path=/stable/5/; revision=141786
* Merge pam_krb5.c:1.22 from HEAD to RELENG_5:Robert Watson2005-02-011-0/+4
| | | | | | | | | | | | | date: 2005/01/24 16:49:50; author: rwatson; state: Exp; lines: +4 -0 When "no_ccache" is set as an argument to the pam_krb5 module, don't copy the acquired TGT from the in-memory cache to the on-disk cache at login. This was documented but un-implemented behavior. PR: bin/64464 Reported and tested by: Eric van Gyzen <vangyzen at stat dot duke dot edu> Notes: svn path=/stable/5/; revision=141105
* Merge pam_krb5.c:1.5 from HEAD to RELENG_5:Robert Watson2005-01-261-2/+3
| | | | | | | | | | | | | date: 2005/01/24 16:49:50; author: rwatson; state: Exp; lines: +4 -0 When "no_ccache" is set as an argument to the pam_krb5 module, don't copy the acquired TGT from the in-memory cache to the on-disk cache at login. This was documented but un-implemented behavior. PR: bin/64464 Reported and tested by: Eric van Gyzen <vangyzen at stat dot duke dot edu> Notes: svn path=/stable/5/; revision=140856
* MFC knob NO_NIS (fka NO_YP_LIBC) and make world compileable when set.Bjoern A. Zeeb2004-11-281-3/+7
| | | | | | | | | If turned on no NIS support and related programs will be built. Approved by: rwatson (mentor) Notes: svn path=/stable/5/; revision=138154
* Join the 21st century: Cryptography is no longer an optional componentColin Percival2004-08-064-7/+0
| | | | | | | | | | | | | of releases. The -DNOCRYPT build option still exists for anyone who really wants to build non-cryptographic binaries, but the "crypto" release distribution is now part of "base", and anyone installing from a release will get cryptographic binaries. Approved by: re (scottl), markm Discussed on: freebsd-current, in late April 2004 Notes: svn path=/head/; revision=133196
* Downgrade WARNS level for GCC 3.4.2.Alexander Kabaev2004-07-282-1/+2
| | | | Notes: svn path=/head/; revision=132759
* Markup nits.Ruslan Ermilov2004-07-051-2/+2
| | | | Notes: svn path=/head/; revision=131608
* Sort SEE ALSO references (in dictionary order, ignoring case).Ruslan Ermilov2004-07-041-1/+1
| | | | Notes: svn path=/head/; revision=131594
* Mechanically kill hard sentence breaks.Ruslan Ermilov2004-07-0216-19/+23
| | | | Notes: svn path=/head/; revision=131504
* Deal with unsafe tab characters.Ruslan Ermilov2004-07-021-1/+3
| | | | Notes: svn path=/head/; revision=131479
* Markup, grammar, punctuation.Ruslan Ermilov2004-07-012-3/+3
| | | | Notes: svn path=/head/; revision=131421
* Revert the last change. There are more 64bit platforms than amd64, andAlexander Kabaev2004-06-251-1/+1
| | | | | | | they break due to diferent alignment restrictions. Notes: svn path=/head/; revision=131100
* Remove the use of cast as lvalue.Alexander Kabaev2004-06-251-1/+1
| | | | Notes: svn path=/head/; revision=131077
* Add -DDEBUG to DEBUG_FLAGS if PAM_DEBUG is defined.Dag-Erling Smørgrav2004-03-151-0/+4
| | | | Notes: svn path=/head/; revision=127023
* Make NULL a (void*)0 whereever possible, and fix the warnings(-Werror)Mark Murray2004-03-051-1/+1
| | | | | | | | | | | | | | | | | | that this provokes. "Wherever possible" means "In the kernel OR NOT C++" (implying C). There are places where (void *) pointers are not valid, such as for function pointers, but in the special case of (void *)0, agreement settles on it being OK. Most of the fixes were NULL where an integer zero was needed; many of the fixes were NULL where ascii <nul> ('\0') was needed, and a few were just "other". Tested on: i386 sparc64 Notes: svn path=/head/; revision=126643
* style cleanup: Remove duplicate $FreeBSD$ tags.Colin Percival2004-02-101-2/+0
| | | | | | | | | | | These files had tags after the copyright notice, inside the comment block (incorrect, removed), and outside the comment block (correct). Approved by: rwatson (mentor) Notes: svn path=/head/; revision=125668
* Fix numerous constness and aliasing issues.Dag-Erling Smørgrav2004-02-106-19/+18
| | | | Notes: svn path=/head/; revision=125650
* Put libraries in the link order.Ruslan Ermilov2004-02-041-3/+2
| | | | | | | Reported by: lorder(1) (modified to work with libraries) Notes: svn path=/head/; revision=125432
* This module doesn't use libgssapi (and it looks never did).Ruslan Ermilov2004-02-041-3/+2
| | | | Notes: svn path=/head/; revision=125426
* Implement pam_sm_close_session().Dag-Erling Smørgrav2004-01-261-1/+13
| | | | | | | | PR: bin/61657 Submitted by: Joe R. Doupnik <jrd@cc.usu.edu> Notes: svn path=/head/; revision=125046
* Deal better with the crypto version of the PAM library that goesRuslan Ermilov2004-01-185-4/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | on the release media -- only put what is different in the crypto version compared to the base version. This reduces PAM entries in /usr/lib in the "crypto" distribution to: libpam.a libpam.so@ libpam.so.2 pam_krb5.so@ pam_krb5.so.2 pam_ksu.so@ pam_ksu.so.2 pam_ssh.so@ pam_ssh.so.2 The libpam.so* is still redundant (it is identical to the "base" version), but we can't set DISTRIBUTION differently for libpam.a and libpam.so. (The removal of libpam.so* from the crypto distribution could be addressed by the release/scripts/crypto-make.sh script, but then we'd also need to remove redundant PAM headers, and I'm not sure this is worth a hassle.) Notes: svn path=/head/; revision=124675
* DISTRIBUTION is normally single-valued.Ruslan Ermilov2004-01-181-1/+1
| | | | Notes: svn path=/head/; revision=124665
* Remove crossref to pam.conf(5) which never existed.Jens Schweikhardt2004-01-171-1/+0
| | | | Notes: svn path=/head/; revision=124615
* bsd.dep.mk,v 1.43 allows us to replace a hack with a solution.Ruslan Ermilov2004-01-131-3/+3
| | | | Notes: svn path=/head/; revision=124491
* Fix a strict aliasing issue. Also remove an unnecessary pam_get_item()Dag-Erling Smørgrav2003-12-111-8/+6
| | | | | | | | | | call (pam_get_authtok() will return the previous token if try_first_pass or use_first_pass is specified). Incidentally fix an ugly bug where the buffer holding the prompt was freed immediately before use, instead of after. Notes: svn path=/head/; revision=123455
* More strict aliasing fixes.Dag-Erling Smørgrav2003-12-111-26/+29
| | | | | | | Submitted by: Andreas Hauser <andy-freebsd@splashground.de> Notes: svn path=/head/; revision=123454
* Fix strict aliasing breakage in PAM modules (except pam_krb5, which needsDag-Erling Smørgrav2003-12-119-42/+44
| | | | | | | more work than the others). This should make most modules build with -O2. Notes: svn path=/head/; revision=123448
* Fix on sparc64.Maxim Sobolev2003-11-121-1/+1
| | | | | | | | Reported by: rwatson/tinderbox MFC after: 2 weeks Notes: svn path=/head/; revision=122589
* Add a new configuration variable - nas_ipaddr, which if set allows toMaxim Sobolev2003-11-122-8/+47
| | | | | | | | | | | set NAS-IP-Address attribute in requests generated by the pam_radius module. This attribute is mandatory for some Radius servers out there. Reviewed by: des MFC after: 2 weeks Notes: svn path=/head/; revision=122571
* - fix to UID test description, non-zero -> zeroKen Smith2003-10-171-1/+1
| | | | | | | | | PR: docs/57799 Reviewed by: des Approved by: blackend (mentor) Notes: svn path=/head/; revision=121166
* Ignore ECHILD from waitpid(2) (our child may have been reaped by theDag-Erling Smørgrav2003-09-191-1/+2
| | | | | | | | | calling process's SIGCHLD handler) PR: bin/45669 Notes: svn path=/head/; revision=120231
* Revert previous commit after fixing libpam.Dag-Erling Smørgrav2003-07-211-1/+1
| | | | Notes: svn path=/head/; revision=117841
* Add a __DECONST() to unbreak the build.Dag-Erling Smørgrav2003-07-151-1/+1
| | | | Notes: svn path=/head/; revision=117638
* Fix the master yppasswd routines, so they really workMartin Blapp2003-06-151-0/+26
| | | | | | | | | | | for root on ypmaster. yppasswd_local() did use YPPASSWDPROG instead of MASTER_YPPASSWDPROG, and the domain was not set, resulting in a coredump during xdr-encode. Reviewed by: des Notes: svn path=/head/; revision=116394
* Add openpam_readline(3).Dag-Erling Smørgrav2003-06-011-0/+2
| | | | Notes: svn path=/head/; revision=115622
* Retire pam_wheel(8) (which has been disconnected for quite a while) andDag-Erling Smørgrav2003-06-016-657/+0
| | | | | | | pam_ftp(8). Notes: svn path=/head/; revision=115617
* Don't build pam_std_option().Dag-Erling Smørgrav2003-05-311-2/+1
| | | | Notes: svn path=/head/; revision=115581
* Update copyright dates.Dag-Erling Smørgrav2003-05-315-5/+5
| | | | Notes: svn path=/head/; revision=115470
* Remove pam_std_option() and related functions. Add #defines for commonDag-Erling Smørgrav2003-05-311-24/+6
| | | | | | | options. Notes: svn path=/head/; revision=115466
* Remove all instances of pam_std_option()Dag-Erling Smørgrav2003-05-315-167/+58
| | | | Notes: svn path=/head/; revision=115465
* Introduce pam_guest(8) which will replace pam_ftp(8).Dag-Erling Smørgrav2003-05-314-1/+220
| | | | Notes: svn path=/head/; revision=115462
* mdoc(7) fixes.Ruslan Ermilov2003-05-241-4/+4
| | | | | | | Approved by: re (blanket) Notes: svn path=/head/; revision=115288
* Retire the useless NOSECURE knob.Dag-Erling Smørgrav2003-05-191-2/+1
| | | | | | | Approved by: re (scottl) Notes: svn path=/head/; revision=115157
* OpenPAM is WANRS6-clean.Dag-Erling Smørgrav2003-05-051-1/+1
| | | | Notes: svn path=/head/; revision=114753
* Turn MAKE_KERBEROS5 into NO_KERBEROS by negating the logic. Some extraMark Murray2003-05-051-1/+1
| | | | | | | | cleanups were necessary in release/Makefile, and the tinderbox code was syntax checked, not run checked. Notes: svn path=/head/; revision=114709