summaryrefslogtreecommitdiffstats
path: root/mod_authnz_pam.c
Commit message (Collapse)AuthorAgeFilesLines
* Addressing apxs:Error: Sorry, cannot determine bootstrap symbol name with ↵Helmut K. C. Tessarek2023-05-251-8/+3
| | | | apxs -i
* Tagging 1.2.3 release.mod_authnz_pam-1.2.3Jan Pazdziora2022-01-231-1/+1
|
* Catch warnings, fix the incompatible pointer type one.Jan Pazdziora2022-01-231-1/+1
|
* Change default redirect status for AuthPAMExpiredRedirect to 303 See Other, ↵Jan Pazdziora2022-01-231-12/+36
| | | | | | | | | | make it configurable. Redirect to reset password typically goes to different system, so repeating for example POST which 307 Temporary Redirect does is not that useful; the 303 See Other will do plain GET. The redirect status can be overriden with an optional second parameter to AuthPAMExpiredRedirect.
* Use ap_get_useragent_host instead of ap_get_remote_hostJake Chen2021-03-301-0/+4
| | | | | | | | | - according to https://www.apachelounge.com/Changelog-2.4.html, modules should be updated to inquire for ap_get_useragent_host() in place of ap_get_remote_host(). - use module magic number 20120211,56 to determine whether to use ap_get_useragent_host (according to https://github.com/apache/httpd/blob/2.4.x/include/ap_mmn.h)
* Store password to cache only after passing all PAM checks, including account.Jake Chen2020-07-081-5/+5
|
* Tagging 1.2.0 release.mod_authnz_pam-1.2.0Jan Pazdziora2018-07-171-1/+1
|
* Skip support for caching on 2.3.7 or older where ap_authn_cache_store did ↵Jan Pazdziora2018-07-171-0/+6
| | | | not exist.
* Implementation of socache caching.schnitzi992018-07-171-0/+32
| | | | | Copied from example code of dbd and dbm socache implementations If PAM-Authentification is successful (AUTH_GRANTED), do apache-style salted bcrypt hash and store it in socache.
* Tagging 1.1.0 release.mod_authnz_pam-1.1.0Jan Pazdziora2016-11-221-1/+1
|
* Fix AuthPAMExpiredRedirect %s escaping on Apache 2.2.Jan Pazdziora2016-11-221-3/+2
|
* Force and send the response redirect status, to avoid the default 401.Jan Pazdziora2016-11-221-1/+3
|
* Use info for success messages, since notice cannot be silenced for logs to ↵Jan Pazdziora2016-11-161-1/+1
| | | | | | files. Suggested by: Phil Endecott
* Put the name of the module to the start of the message on Apache 2.4.Jan Pazdziora2016-11-161-4/+15
| | | | | | | | | Replacing [Tue Nov 15 18:00:42.602043 2016] [:notice] [pid 27824] [client 10.11.12.13:40740] mod_authnz_pam: PAM authentication passed for user bob@EXAMPLE.COM with [Tue Nov 15 18:00:42.602043 2016] [authnz_pam:notice] [pid 27824] [client 10.11.12.13:40740] PAM authentication passed for user bob@EXAMPLE.COM Suggested by: Phil Endecott
* Prefer ap_log_rerror for messages related to a particular request.Jan Pazdziora2016-11-151-3/+3
| | | | Suggested by: Phil Endecott
* Only put the password to the first response (factor).Jan Pazdziora2015-11-091-1/+5
| | | | | | When modules start to support pre-auth, we would put the password+code (in case of OTP setup) to both first and second factor, leading to PAM_CRED_ERR / Failure setting user credentials.
* Reimplement ap_escape_urlencoded for Apache 2.2.Jan Pazdziora2015-05-041-0/+25
|
* Add support for replacement placeholders %s and %u.Jan Pazdziora2015-05-041-1/+36
|
* Add support for AuthPAMExpiredRedirect, to redirect to URL where user can ↵Jan Pazdziora2015-04-241-3/+17
| | | | reset their password.
* Populate PAM_RHOST to support host-based checks via pam_access(8).Jan Pazdziora2014-06-231-1/+9
|
* Avoid confusing error message "failed for user <pam-service>" when ↵mod_authnz_pam-0.9.1Jan Pazdziora2014-04-151-0/+1
| | | | pam_authenticate step is skipped.
* Declare create_dir_conf static as well, for proper isolation.Jan Pazdziora2014-02-141-1/+1
|
* Declare all functions static for proper isolation.mod_authnz_pam-0.7Jan Pazdziora2014-01-091-1/+1
|
* Make pam_authenticate_with_login_password available to other modules.mod_authnz_pam-0.6Jan Pazdziora2014-01-091-0/+5
|
* Implement the pam-account authz provider for Apache 2.4.Jan Pazdziora2014-01-061-0/+26
|
* Add support for require pam-account the-service-name.Jan Pazdziora2014-01-061-0/+28
|
* Apache module mod_authnz_pam.Jan Pazdziora2014-01-061-0/+136