summaryrefslogtreecommitdiffstats
path: root/source/auth/pampass.c
Commit message (Collapse)AuthorAgeFilesLines
* Fix two incompatible pointer warningsVolker Lendecke2007-12-081-1/+1
| | | | Jeremy, please check
* Remove next_token - all uses must now be next_token_talloc.Jeremy Allison2007-12-071-7/+14
| | | | | No more temptations to use static length strings. Jeremy.
* Remove most of the remaining globals out of lib/util_sock.c.Jeremy Allison2007-11-031-2/+2
| | | | | | I have a plan for dealing with the remaining..... Watch this space. Jeremy.
* I can't get away without a 'length' arg. :-).Jeremy Allison2007-11-031-1/+1
| | | | Jeremy.
* Stop get_peer_addr() and client_addr() from using globalJeremy Allison2007-11-031-1/+2
| | | | | statics. Part of my library cleanups. Jeremy.
* RIP BOOL. Convert BOOL -> bool. I found a few interestingJeremy Allison2007-10-181-12/+12
| | | | | | | bugs in various places whilst doing this (places that assumed BOOL == int). I also need to fix the Samba4 pidl generation (next checkin). Jeremy.
* r23784: use the GPLv3 boilerplate as recommended by the FSF and the license textAndrew Tridgell2007-10-101-2/+1
|
* r23779: Change from v2 or later to v3 or later.Jeremy Allison2007-10-101-1/+1
| | | | Jeremy.
* r23095: Support systems that have their PAM headers in /usr/include/pam.James Peach2007-10-101-0/+4
|
* r18616: fix breakage after DLIST_ADD_END() changes for --with-pamGerald Carter2007-10-101-2/+1
|
* r17573: Fix typoVolker Lendecke2007-10-101-1/+1
|
* r12279: unix_mask_match has been broken for *ever*... (How).Jeremy Allison2007-10-101-2/+2
| | | | | | | | Ensure it returns a BOOL. Jerry (and anyone else) please check this, I think all uses are now correct but could do with another set of eyes. Essential for 3.0.21 release. Jeremy.
* r8889: Another warningVolker Lendecke2007-10-101-1/+1
|
* r6445: Make us survive the PARANOID_MALLOC_CHECKER. Should we enable that forVolker Lendecke2007-10-101-5/+5
| | | | | | --enable-developer=yes? Volker
* r4236: More *alloc fixes.Jeremy Allison2007-10-101-1/+1
| | | | Jeremy.
* r2703: Fix typo noticed by Igor Belyi <sambauser@katehok.ac93.org>Jeremy Allison2007-10-101-1/+1
| | | | Jeremy.
* More tuning from cachegrind. Change most trim_string() calls to trim_char(0,Jeremy Allison2003-09-051-4/+4
| | | | | as that's what they do. Fix string_replace() to fast-path ascii. Jeremy.
* Fixed strlower changes I missed. Pointed out by metze.Jeremy Allison2003-07-041-2/+2
| | | | Jeremy
* Merge from HEAD - make Samba compile with -Wwrite-strings without additionalAndrew Bartlett2003-01-031-2/+2
| | | | | | warnings. (Adds a lot of const). Andrew Bartlett
* updated the 3.0 branch from the head branch - ready for alpha18Andrew Tridgell2002-07-151-5/+8
|
* Fix use of uninitialsed variable in PAM codeAndrew Bartlett2002-02-051-2/+2
|
* Drastic impromvents to pam_winbind.Andrew Bartlett2002-02-051-21/+2
| | | | | | | | | | | | | | | | | This adds code to do generic PAM -> NTSTATUS and NTSTATUS -> PAM error conversions, and uses them to make the error handling in pam_winbind sane. In particular, pam_winbind now uses PAM error codes, not silly '-1, -2 ...' stuff, and logs the NTSTATUS error that winbind now sends over the pipe. Added code to wbinfo to display these - makes a big difference in debugging winbindd. The main change here is the code to allow pam_winbind password changing to correctly stack - This code ripped from pam_unix, and the copyright attached. (Same as for all pam modules, including pam_winbind) Andrew Bartlett
* Removed version number from file header.Tim Potter2002-01-301-2/+1
| | | | Changed "SMB/Netbios" to "SMB/CIFS" in file header.
* Small 'const' updates ahead of some AuthRewrite merging.Andrew Bartlett2001-10-311-5/+5
|
* This commit is number 4 of 4.Andrew Bartlett2001-10-291-13/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In particular this commit focuses on: Actually adding the 'const' to the passdb interface, and the flow-on changes. Also kill off the 'disp_info' stuff, as its no longer used. While these changes have been mildly tested, and are pretty small, any assistance in this is appreciated. ---- These changes introduces a large dose of 'const' to the Samba tree. There are a number of good reasons to do this: - I want to allow the SAM_ACCOUNT structure to move from wasteful pstrings and fstrings to allocated strings. We can't do that if people are modifying these outputs, as they may well make assumptions about getting pstrings and fstrings - I want --with-pam_smbpass to compile with a slightly sane volume of warnings, currently its pretty bad, even in 2.2 where is compiles at all. - Tridge assures me that he no longer opposes 'const religion' based on the ability to #define const the problem away. - Changed Get_Pwnam(x,y) into two variants (so that the const parameter can work correctly): - Get_Pwnam(const x) and Get_Pwnam_Modify(x). - Reworked smbd/chgpasswd.c to work with these mods, passing around a 'struct passwd' rather than the modified username --- This finishes this line of commits off, your tree should now compile again :-) Andrew Bartlett
* Fixed up the change password bug when not using PAM.Jeremy Allison2001-10-021-2/+2
| | | | | | | | | | | | The problem is we were trying to use mask_match as a generic wildcard matcher for UNIX strings (like the password prompts). We can't do that - we need a unix_wild_match (re-added into lib/util.c) as the ms_fnmatch semantics for empty strings are completely wrong. This caused partial reads to be accepted as correct passwd change responses when they were not.... Also added paranioa test to stop passwd change being done as root with no %u in the passwd program string. Jeremy.
* Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.Tim Potter2001-10-021-2/+0
|
* move to SAFE_FREE()Simo Sorce2001-09-171-12/+9
|
* cope with pam being offAndrew Tridgell2001-09-041-1/+1
|
* the next stage in the NTSTATUS/WERROR change. smbd and nmbd now compile, but ↵Andrew Tridgell2001-09-041-17/+18
| | | | the client code still needs some work
* converted another bunch of stuff to NTSTATUSAndrew Tridgell2001-08-271-10/+10
|
* Fix case insensitive password change code.Jeremy Allison2001-07-231-4/+2
| | | | | Fixed crash bug with un-zeroed talloced memory. Jeremy.
* Password changing via PAM works now. DONT CHANGE THIS UNLESS YOU RE-TEST !!!!!!Jeremy Allison2001-07-061-2/+19
| | | | Jeremy.
* Added Andrew's pam password change stuff. Needs some testing but looks good !Jeremy Allison2001-06-251-44/+140
| | | | Jeremy.
* Fixed up the oldpw prompts. Made the matching case insensitive.Jeremy Allison2001-05-091-5/+24
| | | | Jeremy.
* Had to add a "pam password change" parameter (defaults to "off") and inlinedJeremy Allison2001-05-021-10/+11
| | | | | | | | | | | the pam password change code to ensure that existing and working password chat scripts don't break with 2.2.1. PAM password changing has to be explicitly requested. Allowed wildcards in pam password change matching (matches password chat script matching). Had to add const (sorry Tim :-) to ms_fnmatch() to stop warnings. Don't worry - the const changes are isolated and don't cause any other warnings :-). Jeremy.
* Runtime check for broken PAM systems with no appdata_ptr support. ThisJeremy Allison2001-05-011-2/+22
| | | | | should eventually be an autoconf test with a #ifdef workaround. I *HATE* pam :-). Jeremy.
* Stop coredump on pam password change with pam_pwdb.so module on error.Jeremy Allison2001-05-011-1/+5
| | | | Jeremy.
* Added Andrew Bartlett's fixes to my changes to his original patch (at theJeremy Allison2001-05-011-2/+2
| | | | | court of king caractacus, was just passing by... :-). Jeremy.
* Allow pam code to compile on Solaris (which doesn't have ↵Jeremy Allison2001-05-011-0/+5
| | | | | | PAM_AUTHTOK_RECOVER_ERR). Jeremy.
* Fixing consts in pam code.Jeremy Allison2001-04-301-2/+2
| | | | Jeremy.
* Based on an original PAM patch by Andrew Bartlett, re-written by me toJeremy Allison2001-04-301-124/+417
| | | | | | | remove global static PAM variables, and to tidy up the PAM internals code. Now looks like the rest of Samba. Still needs testing. Jeremy.
* Added "obey pam restrictions" parameter - default to "off".Jeremy Allison2001-04-231-0/+17
| | | | | | | Only set this to "on" if you know you have your PAM set up correctly..... NB. Doesn't apply to plaintext password authentication, which must use pam when compiled in. Jeremy.
* Fix more free twice bugs.Jeremy Allison2001-04-231-2/+5
| | | | Jeremy.
* Fix for bug in code for pam_session failure - pam_end called twice.Jeremy Allison2001-04-231-12/+5
| | | | Jeremy.
* Added smb_ prefix to all Samba wrapper pam functions.Jeremy Allison2001-04-231-49/+47
| | | | | Fixed off by one bug using StrnCpy instead of strdup(). Jeremy.
* Commit of a modified version of Andrew Bartlett's patch that removes theJeremy Allison2001-04-221-97/+84
| | | | | | | | | | horrid utmp hostname parameter - now uses the client name instead. Also tidies up some of the unencrypted password checking when PAM is compiled in. FIXME ! An pam_accountcheck() is being called even when smb encrypted passwords are negotiated. Is this the correct thing to do when winbindd is running ! This needs *SEVERE* testing.... Jeremy.
* Oops. Typos.John Terpstra2001-04-201-2/+2
|
* Added error reporting to pam_session code.John Terpstra2001-04-191-0/+19
|
* merge from 2.2Andrew Tridgell2001-04-181-3/+3
|