Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
- allow different protocol versions for PAM and NSS
- support more than one protocol version in the responder
|
|
|
|
- if PAM_USER==root return PAM_USER_UNKNOWN
- pam_sss now can handle to following options:
- use_first_pass: forces the module to use a previous stacked modules
password and will never prompt the user
- use_authtok: when password changing enforce the module to set the new
password to the one provided by a previously stacked password module
- forward_pass: store the passwords collected by the module as pam items for
modules called later in the stack
|
|
|
|
|
|
|
|
Other pam modules which are called after pam_sss might want to
reuse the given password so that the user is not bothered with
multiple password prompt. When pam_sss is configured with the
option 'forward_pass' it will use pam_set_item to safe the
password for other pam modules.
|
|
|
|
|
|
|
|
|
|
|
|
Also bump up the version as this error prevented a successful build of 0.2.0
|
|
Change version after changes in protocol and MPG behavior.
|
|
|
|
In the nss communication protocol we were treating uids and gids as 64 bit
values, but uids and gids are really u32 values, change the protocol to reflect
the real size.
|
|
Fix infinite loop within initgr functions.
Fix min length check copy&paste error, was filtering valid groups if the name
was short enough and the group had no members.
|
|
Afaik glibc uses just .so/.so.2, and all other nss libs I can see in the system
are the same.
|
|
|
|
|
|
With this fix configure must be passed the right libdir argument depending on
the platform you are building on.
For example on Linux x86_64:
./configure --libdir=/lib64
|
|
|
|
|
|
Also rename nss_client to sss_client and reuse the same
pipe protocol for both the NSS and PAM client libraries.
Signed-off-by: Simo Sorce <ssorce@redhat.com>
|