src/lib/libpam, branch releng/9.0

MFH r228410: check for null passphrases, since openssl doesn't

2011-12-11T17:32:37Z

Approved by: re (kib) Security: prevents users with unencrypted ssh keys (prohibited unless the nullok option is specified) from logging in by providing a bogus non-null passphrase.

Mention the name of the module in warning messages.

2011-03-12T11:26:37Z

Add "ruser" and "luser" options. The former corresponds to the current

2011-03-12T11:12:30Z

behavior, where the module checks that the supplicant is a member of the required group. The latter checks the target user instead. If neither option was specified, pam_group(8) assumes "ruser" and issues a warning. I intend to eventually change the default to "luser" to match the behavior of similarly-named service modules in other operating systems. MFC after: 1 month

No newline required.

2011-03-09T14:38:00Z

MFC after: 2 weeks

Add for ctime(), which we accidentally picked up through

2010-11-22T14:45:16Z

. Submitted by: Garrett Cooper MFC after: 3 days

Bump .Dd date.

2010-05-03T09:49:42Z

Forgotten by: delphij

Code indent according to style(9).

2010-05-03T07:39:51Z

PR: bin/146186 Submitted by: myself Approved by: delphij (mentor) MFC after: 2 weeks

Implement the no_user_check option to pam_krb5.

2010-05-03T07:32:24Z

This option is available in the Linux implementation of pam_krb5 and allows to authorize a user not known to the local system. Ccache is not used as we don't have a secure uid/gid for the cache file. Usable for authentication of external kerberos users (e.g Active Directory) via PAM from applications like Cyrus saslauthd, PHP or perl. PR: bin/146186 Submitted by: myself Approved by: deplhij (mentor) MFC after: 2 weeks

Upgrade to OpenSSH 5.4p1.

2010-03-09T19:16:43Z

MFC after: 1 month

Remove redundant WARNS?=6 overrides and inherit the WARNS setting from

2010-03-02T18:44:08Z

the toplevel directory. This does not change any WARNS level and survives a make universe. Approved by: ed (co-mentor)