| 272461 |
03-Oct-2014 |
gjb |
Copy stable/10@r272459 to releng/10.1 as part of
the 10.1-RELEASE process.
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
| 256281 |
10-Oct-2013 |
gjb |
Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation
|
| 173003 |
26-Oct-2007 |
des |
Correct documentation of ~/.opiealways
PR: 117512
Submitted by: Jeremy C. Reed <reed@reedmedia.net>
MFC after: 1 week
|
| 131504 |
02-Jul-2004 |
ru |
Mechanically kill hard sentence breaks.
|
| 125668 |
10-Feb-2004 |
cperciva |
style cleanup: Remove duplicate $FreeBSD$ tags.
These files had tags after the copyright notice,
inside the comment block (incorrect, removed),
and outside the comment block (correct).
Approved by: rwatson (mentor)
|
| 123448 |
11-Dec-2003 |
des |
Fix strict aliasing breakage in PAM modules (except pam_krb5, which needs
more work than the others). This should make most modules build with -O2.
|
| 114264 |
30-Apr-2003 |
des |
Treat an empty PAM_RHOST the same as a NULL one.
PR: bin/51508
|
| 112057 |
10-Mar-2003 |
des |
Somewhat better wording.
|
| 112056 |
10-Mar-2003 |
des |
Silence warning caused by OPIE brokenness.
|
| 112044 |
09-Mar-2003 |
obrien |
style.Makefile(5) police
(I've tried to keep to the spirit of the original formatting)
Reviewed by: des
|
| 111285 |
23-Feb-2003 |
ru |
mdoc(7) police: markup laundry.
|
| 110991 |
16-Feb-2003 |
des |
Add an "allow_local" option which forces historical behaviour.
|
| 110968 |
15-Feb-2003 |
des |
Assume "localhost" if no remote host was specified. This is safe from a
POLA point of view since the stock /etc/opieaccess now allows localhost.
|
| 94734 |
15-Apr-2002 |
des |
Use PAM_SUCCESS instead of PAM_IGNORE.
|
| 94564 |
12-Apr-2002 |
des |
Major cleanup:
- add __unused where appropriate
- PAM_RETURN -> return since OpenPAM already logs the return value.
- make PAM_LOG use openpam_log()
- make PAM_VERBOSE_ERROR use openpam_get_option() and check flags
for PAM_SILENT
- remove dummy functions since OpenPAM handles missing service
functions
- fix various warnings
Sponsored by: DARPA, NAI Labs
|
| 94372 |
10-Apr-2002 |
ru |
Moved SHLIB_NAME definition into one place.
Approved by: des
|
| 92939 |
22-Mar-2002 |
markm |
Fix for OPIE 2.4.
|
| 92593 |
18-Mar-2002 |
ru |
mdoc(7) police: fix SYNOPSIS, sort xrefs, kill extra whitespace.
|
| 92297 |
14-Mar-2002 |
des |
NAI DBA update.
|
| 91714 |
05-Mar-2002 |
des |
Switch to OpenPAM. Bump library version. Modules are now versioned, so
applications linked with Linux-PAM will still work.
Remove pam_get_pass(); OpenPAM has pam_get_authtok().
Remove pam_prompt(); OpenPAM has pam_{,v}{error,info,prompt}().
Remove pam_set_item(3) man page as OpenPAM has its own.
Sponsored by: DARPA, NAI Labs
|
| 90229 |
05-Feb-2002 |
des |
#include cleanup.
Sponsored by: DARPA, NAI Labs
|
| 89760 |
24-Jan-2002 |
markm |
WARNS=4 fixes. Protect with NO_WERROR for the modules that have
warnings that are hard to fix or that I've been asked to leave alone.
|
| 89745 |
24-Jan-2002 |
des |
Correctly interpret PAM_RHOST being unset as an indicator of a local
login.
Sponsored by: DARPA, NAI Labs
|
| 89706 |
23-Jan-2002 |
des |
Add an AUTHORS section crediting ThinkSec, DARPA and NAI Labs.
Sponsored by: DARPA, NAI Labs
|
| 89621 |
21-Jan-2002 |
des |
On second thought, getpwnam() failure should be treated just as if the user
existed, but had no OPIE key, i.e. PAM_IGNORE.
Pointed out by: ache
Sponsored by: DARPA, NAI Labs
|
| 89620 |
21-Jan-2002 |
des |
Return PAM_SERVICE_ERR rather than PAM_USER_UNKNOWN if getpwnam() fails, as
PAM_USER_UNKNOWN will break the chain, revealing to an attacker that the
user does not exist.
Sponsored by: DARPA, NAI Labs
|
| 89613 |
21-Jan-2002 |
des |
Add a new module, pam_opieaccess(8), which is responsible for checking
/etc/opieaccess and ~/.opiealways so we can decide what to do after
pam_opie(8) fails.
Sponsored by: DARPA, NAI Labs
Reviewed by: ache, markm
|