rooty/yubico-pam
1
0
Fork 0
mirror of https://github.com/Yubico/yubico-pam.git synced 2025-03-15 18:29:16 +01:00
Code Issues Projects Releases Wiki Activity

Get rid of unimplemented PAM functions

Browse Source
This commit is contained in:
Tollef Fog Heen 2011-03-12 14:34:45 +01:00
parent e338807cc8
commit 49c923a99d
1 changed files with 5 additions and 113 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

116
pam_yubico.c
View File

@ -39,9 +39,6 @@
/* These #defines must be present according to PAM documentation. */ /* These #defines must be present according to PAM documentation. */
#define PAM_SM_AUTH #define PAM_SM_AUTH
#define PAM_SM_ACCOUNT
#define PAM_SM_SESSION
#define PAM_SM_PASSWORD
#ifdef HAVE_SECURITY_PAM_APPL_H #ifdef HAVE_SECURITY_PAM_APPL_H
#include <security/pam_appl.h> #include <security/pam_appl.h>
@ -681,124 +678,19 @@ done:
PAM_EXTERN int PAM_EXTERN int
pam_sm_setcred (pam_handle_t * pamh, int flags, int argc, const char **argv) pam_sm_setcred (pam_handle_t * pamh, int flags, int argc, const char **argv)
{ {
int retval;
uintptr_t auth_retval;
struct cfg cfg;
/* Parse config to see if we are debugging or not. */
parse_cfg (flags, argc, argv, &cfg);
DBG (("called."));
/* TODO: ? */
/* Try to get result of pam_sm_authenticate() to re-use as return
* value here. This does not always work though (OpenSSH sometimes forks
* between auth and setcred), so we turn any failure from pam_get_data()
* into PAM_SUCCESS. This is in line with how other PAM modules do.
*/
retval = pam_get_data (pamh, "yubico_setcred_return",
(void*) (intptr_t) &auth_retval);
DBG (("retval: %d", auth_retval));
if (retval != PAM_SUCCESS)
{
DBG (("done (ignoring pam_get_data error, returning PAM_SUCCESS)."));
return PAM_SUCCESS; return PAM_SUCCESS;
} }
switch (auth_retval)
{
case PAM_SUCCESS:
retval = PAM_SUCCESS;
break;
case PAM_USER_UNKNOWN:
retval = PAM_USER_UNKNOWN;
break;
case PAM_AUTH_ERR:
default:
retval = PAM_CRED_ERR;
break;
}
DBG (("done. [%s]", pam_strerror (pamh, retval)));
return retval;
}
PAM_EXTERN int
pam_sm_acct_mgmt (pam_handle_t * pamh, int flags, int argc, const char **argv)
{
int retval;
D (("called."));
/* TODO: ? */
retval = PAM_SUCCESS;
D (("done. [%s]", pam_strerror (pamh, retval)));
return retval;
}
PAM_EXTERN int
pam_sm_open_session (pam_handle_t * pamh,
int flags, int argc, const char **argv)
{
int retval;
D (("called."));
/* TODO: ? */
retval = PAM_SUCCESS;
D (("done. [%s]", pam_strerror (pamh, retval)));
return retval;
}
PAM_EXTERN int
pam_sm_close_session (pam_handle_t * pamh,
int flags, int argc, const char **argv)
{
int retval;
D (("called."));
/* TODO: ? */
retval = PAM_SUCCESS;
D (("done. [%s]", pam_strerror (pamh, retval)));
return retval;
}
PAM_EXTERN int
pam_sm_chauthtok (pam_handle_t * pamh, int flags, int argc, const char **argv)
{
int retval;
D (("called."));
/* TODO: ? */
retval = PAM_SUCCESS;
D (("done. [%s]", pam_strerror (pamh, retval)));
return retval;
}
#ifdef PAM_STATIC #ifdef PAM_STATIC
struct pam_module _pam_yubico_modstruct = { struct pam_module _pam_yubico_modstruct = {
"pam_yubico", "pam_yubico",
pam_sm_authenticate, pam_sm_authenticate,
pam_sm_setcred, pam_sm_setcred,
pam_sm_acct_mgmt, NULL,
pam_sm_open_session, NULL,
pam_sm_close_session, NULL,
pam_sm_chauthtok NULL
}; };
#endif #endif