Copy stable/10@r272459 to releng/10.1 as part of
the 10.1-RELEASE process.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Remove unnecessary #include.

Build lib/ with WARNS=6 by default.

Similar to libexec/, do the same with lib/. Make WARNS=6 the norm and
lower it when needed.

I'm setting WARNS?=0 for secure/. It seems secure/ includes the
Makefile.inc provided by lib/. I'm not going to touch that directory.
Most of the code there is contributed anyway.

Send not only Access Request, but also Access Challenge with defined
NAS-Identifier and NAS-IP-Address.

Reviewed by: bz
MFC after: 1 month

Don't use a cast as an lvalue.
Add a redundant test to make it painfully obvious to the reader that this
code does not support IPv6.

Approved by: re (dwhite)
MFC after: 1 week

Expand *n't contractions.

Downgrade WARNS level for GCC 3.4.2.

Mechanically kill hard sentence breaks.

Markup, grammar, punctuation.

Revert the last change. There are more 64bit platforms than amd64, and
they break due to diferent alignment restrictions.

Remove the use of cast as lvalue.

Fix strict aliasing breakage in PAM modules (except pam_krb5, which needs
more work than the others). This should make most modules build with -O2.

Fix on sparc64.

Reported by: rwatson/tinderbox
MFC after: 2 weeks

Add a new configuration variable - nas_ipaddr, which if set allows to
set NAS-IP-Address attribute in requests generated by the pam_radius
module. This attribute is mandatory for some Radius servers out there.

Reviewed by: des
MFC after: 2 weeks

Revert previous commit after fixing libpam.

Add a __DECONST() to unbreak the build.

Update copyright dates.

Remove all instances of pam_std_option()

style.Makefile(5) police
(I've tried to keep to the spirit of the original formatting)

Reviewed by: des

mdoc(7) police: formatting nits.

Approved by: re

Allow the admin to specify a different NAS identifier than the hostname.

Submitted by: Boris Kovalenko <boris@ntmk.ru>

Major cleanup:

- add __unused where appropriate
- PAM_RETURN -> return since OpenPAM already logs the return value.
- make PAM_LOG use openpam_log()
- make PAM_VERBOSE_ERROR use openpam_get_option() and check flags
for PAM_SILENT
- remove dummy functions since OpenPAM handles missing service
functions
- fix various warnings

Sponsored by: DARPA, NAI Labs

Moved SHLIB_NAME definition into one place.

Approved by: des

Aggressive cleanup of warnings + authtok-related code in preparation for
PAMifying passwd(1).

Sponsored by: DARPA, NAI Labs.

NAI DBA update.

Switch to OpenPAM. Bump library version. Modules are now versioned, so
applications linked with Linux-PAM will still work.
Remove pam_get_pass(); OpenPAM has pam_get_authtok().
Remove pam_prompt(); OpenPAM has pam_{,v}{error,info,prompt}().
Remove pam_set_item(3) man page as OpenPAM has its own.

Sponsored by: DARPA, NAI Labs

Remove NO_WERROR, now that WARNS=n is gone.

#include cleanup.

Sponsored by: DARPA, NAI Labs

WARNS=4 fixes. Protect with NO_WERROR for the modules that have
warnings that are hard to fix or that I've been asked to leave alone.

Add dummy functions for all module types. These dummies return PAM_IGNORE
rather than PAM_SUCCESS, so you'll get a failure if you list dummies but
no real modules for a particular module chain.

Sponsored by: DARPA, NAI Labs

Add __FBSDID()s to libpam

Verbose logging, overridable verbose error reporting.

mdoc(7) police: removed HISTORY info from the .Os call.

Clean up (and in some cases write) the PAM mudules, using
o The new options-processing API
o The new DEBUG-logging API

Add man(1) pages for ALL modules. MDOC-Police welcome
to check this.

Audit, clean up while I'm here.

mdoc(7) police: sort SEE ALSO xrefs (sort -b -f +2 -3 +1 -2).

Big module cleanup.

Move common stuff into Makefile.inc, and tidy up all the Makefiles
as a result.

Build new modules.

Put a commented-out dependancy on libpam for the (shared) modules.
I can't bring this in just yet, as the dependancy (modules->libpam)
is reversed for the static case (libpam->modules).

mdoc(7) police: uppercase document title.

MAN[1-9] -> MAN.

Use a unified libgcc rather than a seperate one for threaded and
non-threaded programs. This provides threaded programs with the
needed exception frame symbols.

parts submitted by: Max Khon <fjoe@iclub.nsu.ru>
PR: 23252

Prepare for mdoc(7)NG.

mdoc(7) police: removed history info from the .Os FreeBSD call.

log

Remove single-space hard sentence breaks. These degrade the quality
of the typeset output, tend to make diffs harder to read and provide
bad examples for new-comers to mdoc.

$Id$ -> $FreeBSD$

Restore INTERNALLIB.

Noticed by: bde,jdp

Add pam_radius.so manual page.

Reviewed by: jdp

Make it possible to use PAM in statically-linked applications.

This commit was generated by cvs2svn to compensate for changes in r41227,
which included commits to RCS files with non-trunk default branches.