mirror of
https://github.com/Yubico/yubico-pam.git
synced 2025-02-01 01:52:17 +01:00
Fix ykc handling.
This commit is contained in:
parent
751962c4b5
commit
7f1a398141
21
pam_yubico.c
21
pam_yubico.c
@ -394,7 +394,7 @@ pam_sm_authenticate (pam_handle_t * pamh,
|
||||
struct pam_message *pmsg[1], msg[1];
|
||||
struct pam_response *resp;
|
||||
int nargs = 1;
|
||||
yubikey_client_t ykc;
|
||||
yubikey_client_t ykc = NULL;
|
||||
struct cfg cfg;
|
||||
|
||||
parse_cfg (flags, argc, argv, &cfg);
|
||||
@ -434,6 +434,10 @@ pam_sm_authenticate (pam_handle_t * pamh,
|
||||
goto done;
|
||||
}
|
||||
|
||||
yubikey_client_set_info (ykc, cfg.client_id, 0, NULL);
|
||||
if (cfg.url)
|
||||
yubikey_client_set_url_template (ykc, cfg.url);
|
||||
|
||||
if (password == NULL)
|
||||
{
|
||||
retval = pam_get_item (pamh, PAM_CONV, (const void **) &conv);
|
||||
@ -489,11 +493,6 @@ pam_sm_authenticate (pam_handle_t * pamh,
|
||||
}
|
||||
}
|
||||
|
||||
yubikey_client_set_info (ykc, cfg.client_id, 0, NULL);
|
||||
|
||||
if (cfg.url)
|
||||
yubikey_client_set_url_template (ykc, cfg.url);
|
||||
|
||||
/* user will enter there system paasword followed by generated OTP */
|
||||
token_otp_with_password = (char *) password;
|
||||
password_len = strlen (token_otp_with_password);
|
||||
@ -551,23 +550,23 @@ pam_sm_authenticate (pam_handle_t * pamh,
|
||||
|
||||
rc = yubikey_client_request (ykc, (const char *) token_otp);
|
||||
|
||||
DBG (("libyubikey-client return value (%d): %s", rc,
|
||||
yubikey_client_strerror (rc)));
|
||||
|
||||
if (token_password != NULL)
|
||||
free (token_password);
|
||||
|
||||
DBG (("libyubikey-client return value (%d): %s", rc,
|
||||
yubikey_client_strerror (rc)));
|
||||
|
||||
if (rc != YUBIKEY_CLIENT_OK)
|
||||
{
|
||||
retval = PAM_SERVICE_ERR;
|
||||
goto done;
|
||||
}
|
||||
|
||||
yubikey_client_done (&ykc);
|
||||
|
||||
retval = PAM_SUCCESS;
|
||||
|
||||
done:
|
||||
if (ykc)
|
||||
yubikey_client_done (&ykc);
|
||||
if (cfg.alwaysok && retval != PAM_SUCCESS)
|
||||
{
|
||||
DBG (("alwaysok needed (otherwise return with %d)", retval));
|
||||
|
Loading…
x
Reference in New Issue
Block a user