rooty/yubico-pam
1
0
Fork 0
mirror of https://github.com/Yubico/yubico-pam.git synced 2024-11-29 09:24:22 +01:00
Code Issues Projects Releases Wiki Activity
301 Commits 19 Branches 44 Tags 1.2 MiB
a07e6612ec
Commit Graph

301 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Fredrik Thulin
feb63ee472 fsync() wants file descriptor 
Also, truncate file before writing if the challenge length has
changed (became shorter) or garbage has otherwise been appended.
 2011-03-14 13:48:10 +01:00
Fredrik Thulin
71d68484f9 Don't generate new challenge on bad response. 2011-03-14 12:44:57 +01:00
Fredrik Thulin
68cdb39132 Support challenge-response files outside user's home directory. 
Having the challege-response data inside the home directory won't
work very well if the YubiKey is to unlock an ecryptfs encrypted
home directory.
 2011-03-14 10:17:12 +01:00
Fredrik Thulin
98e5e17bdc Merge remote branch 'remim/master' 2011-03-14 09:07:45 +01:00
Tollef Fog Heen
d9ee08b97f Add challenge-response authentication 2011-03-12 15:57:07 +01:00
Tollef Fog Heen
ed1ce7e6e7 Undef USERFILE when we don't need it any more 2011-03-12 15:57:02 +01:00
Tollef Fog Heen
e143afb050 Look for libykpers-1, which we will need for challenge-response 2011-03-12 15:56:51 +01:00
Tollef Fog Heen
49c923a99d Get rid of unimplemented PAM functions 2011-03-12 15:56:48 +01:00
Fredrik Thulin
e338807cc8 Merge branch 'fix/various_ldap_fixes' 2011-03-10 20:50:48 +01:00
Fredrik Thulin
27346d9be9 sync 2011-03-10 10:48:20 +01:00
Fredrik Thulin
a59c6c4d71 Ignore errors from pam_get_data(). 2011-03-04 15:52:02 +01:00
Fredrik Thulin
f91a7dc99a Correct debug log message for too short OTPs. 2011-03-03 15:45:00 +01:00
Fredrik Thulin
a5594fa09c Merge branch 'devel/avoid_logging_passwords' 2011-03-03 15:07:53 +01:00
Fredrik Thulin
952668811d Merge branch 'feature/non_static_id_length' 2011-03-03 15:06:22 +01:00
Fredrik Thulin
702ac98b21 Bugfix getting option token_id_length. 2011-03-03 15:06:15 +01:00
Fredrik Thulin
ac76947e8a Avoid logging passwords when debug is enabled. 
Problem reported in
http://code.google.com/p/yubico-pam/issues/detail?id=28
 2011-03-03 15:00:05 +01:00
Fredrik Thulin
60d9e6063b Merge branch 'feature/non_static_id_length' 2011-03-03 14:45:52 +01:00
Fredrik Thulin
abb0b7e4e4 authorize_user_token_ldap: Only fetch the attribute we're interested in. 
Previous version fetched ALL attributes of the identified object,
and treated them all equal when looking for the YubiKey token identifier.
 2011-03-03 14:18:00 +01:00
Fredrik Thulin
a9ef97ea4c authorize_user_token_ldap: Don't leak memory on failures. 2011-03-03 12:48:43 +01:00
Fredrik Thulin
0bb1630abf authorize_user_token_ldap: sr was under-allocated by one byte. 
Also change strcat's to sprintf to make code easier to maintain.
 2011-03-03 12:38:34 +01:00
Fredrik Thulin
bfd8efd682 Don't segfault on unset LDAP parameters. 
When ldapserver / ldap_uri was specified, but not for example
user_attr, authorize_user_token_ldap() used to cause a segmentation
fault.
 2011-03-03 10:58:34 +01:00
Fredrik Thulin
01897ebb9e Use LDAPv3 instead of LDAPv2. 
LDAPv2 was declared historical in 2003, and is now not supported by
for example Mac OS X Server's Open Directory.
Patch by maxsanna81@gmail.com.
 2011-03-03 10:31:30 +01:00
Fredrik Thulin
90a7fd0f0a Avoid LDAP warnings about deprecated functions. 
Patch by judas.iscariote.
 2011-03-03 10:19:55 +01:00
Fredrik Thulin
6a0c8fc82b authorize_user_token_ldap: Use correct LDAP free function. 
Patch by judas.iscariote.
 2011-03-03 10:11:16 +01:00
Fredrik Thulin
336f794b42 Make length of public ID part of tokens configurable. 
Now that we support setting URL, not all public ID's can be expected
to be six bytes (the length used in the YubiCloud validation service).

Unfortunately we can't support OTPs of different lengths at once,
because there is code supporting users entering their (other)
password followed by the OTP from the YubiKey.

Patch by fraser.scott@gmail.com in
http://code.google.com/p/yubico-pam/issues/detail?id=19
 2011-03-02 22:08:58 +01:00
Fredrik Thulin
ff14ae114c Check for ykclient-2.4+, since we use new ca_path function. 2011-03-02 21:51:38 +01:00
Fredrik Thulin
bdfa3891e2 Add debug output of url and capath. 2011-02-28 15:42:56 +01:00
Fredrik Thulin
9d9228bd46 Merge branch 'master' of github.com:Yubico/yubico-pam 2011-02-22 15:31:35 +01:00
Fredrik Thulin
e3440786bf init 2011-02-16 22:22:23 +01:00
Fredrik Thulin
64d641f544 sync 2011-02-16 22:21:59 +01:00
Fredrik Thulin
6825604968 Change to make releases from Github. 2011-02-16 22:21:41 +01:00
Fredrik Thulin
4b7fe7e880 Convert to asciidoc (used by Github wiki). 2011-02-16 22:20:38 +01:00
Fredrik Thulin
bbfde5cc17 Add submodule doc. 2011-02-16 22:17:00 +01:00
Remi Mollon
98dd410386 Add capath parameter to PAM module 2011-02-14 22:24:57 +08:00
Remi Mollon
d122f27825 Add capath parameter to PAM module 2011-02-14 17:20:48 +08:00
Simon Josefsson
bc96ebf148 Bump versions. 2010-09-10 11:08:52 +00:00
Simon Josefsson
9bad57f93f Fix. 2010-09-10 08:42:41 +00:00
Simon Josefsson
d4d83de923 Add. 2010-09-10 08:22:30 +00:00
Simon Josefsson
7f5dbaeaf1 Include wiki pages in distribution. 2010-09-10 08:21:35 +00:00
Simon Josefsson
d2d1b511d3 Fix release target. 2010-09-10 07:39:07 +00:00
Simon Josefsson
1fb5b8241a Bump versions. 2010-09-09 23:17:30 +00:00
Simon Josefsson
5a3fc2b658 Version 2.4. 2010-09-09 23:12:45 +00:00
Simon Josefsson
4e178389cb Add. 2010-09-09 21:42:00 +00:00
Simon Josefsson
2fee6c1fcf Fix segmentation fault on 64-bit systems. 
Reported by multiple people in Issue #11
<http://code.google.com/p/yubico-pam/issues/detail?id=11>.
 2010-09-09 21:40:38 +00:00
Simon Josefsson
c6e3b5bf16 Improve verbose_otp documentation. 2010-09-09 20:31:44 +00:00
Simon Josefsson
075cb5663f Handle ^D at su prompt. 2010-09-09 20:28:20 +00:00
Simon Josefsson
e6bed0bfcd Make deprecated "ldapserver" work again. 
Reported by giovannibajo in Issue #27:
<http://code.google.com/p/yubico-pam/issues/detail?id=27>.
 2010-07-13 16:53:24 +00:00
Erinn Looney-Triggs
c8eb802620 Update README to clarify a few points, put in wiki markup and add section on how to locate the token ID. 2010-05-20 19:11:33 +00:00
Simon Josefsson
78c2c10696 Document "verbose_otp". 
From  qistoph in http://code.google.com/p/yubico-pam/issues/detail?id=22
 2010-04-14 09:48:25 +00:00
Simon Josefsson
424090508c Build with -DPAM_DEBUG so that debug file writing works. 
Reported by qistoph in Issue #20:
<http://code.google.com/p/yubico-pam/issues/detail?id=20>.
 2010-04-14 09:11:52 +00:00