des
3d4000737f
Add missing "nullok" option to pam_unix.
2002-02-08 23:27:22 +00:00
des
8b7b73f838
Add pam_self(8) so users can login(1) as themselves without authentication,
...
pam_login_access(8) and pam_securetty(8) to enforce various checks
previously done by login(1) but now handled by PAM, and pam_lastlog(8) to
record login sessions in utmp / wtmp / lastlog.
Sponsored by: DARPA, NAI Labs
2002-01-30 19:13:23 +00:00
des
be6e4b351f
Use pam_self(8) to allow users to su(1) to themselves without authentication.
...
Sponsored by: DARPA, NAI Labs
2002-01-30 19:04:39 +00:00
des
2de07ddf80
Enable OPIE by default, using the no_fake_prompts option to hide it from
...
users who don't wish to use it. If the admin is worried about leaking
information about which users exist and which have OPIE enabled, the
no_fake_prompts option can simply be removed.
Also insert the appropriate pam_opieaccess lines after pam_opie to break
the chain in case the user is logging in from an untrusted host, or has a
.opiealways file. The entire opieaccess / opiealways concept is slightly
unpammish, but admins familiar with OPIE will expect it to work.
Reviewed by: ache, markm
Sponsored by: DARPA, NAI Labs
2002-01-21 18:51:24 +00:00
des
6f44d9644f
Really back out ache's commits. These files are now precisely as they were
...
twentyfour hours ago, except for RCS ids.
2002-01-19 18:29:50 +00:00
ache
d90ac373d0
Back out recent changes
2002-01-19 18:03:11 +00:00
ache
49430c7614
Turn on pam_opie by default. It should not affect non-OPIE users.
2002-01-19 10:31:32 +00:00
ache
5dc61eda4c
Turn on pam_opie by default. It not affect non-OPIE users
2002-01-19 09:06:45 +00:00
ache
e3c12ab5a7
Previous commit was incomplete, use
...
"[default=ignore success=done cred_err=die]"
options instead of "required"
2002-01-19 08:39:35 +00:00
ache
58c12a40f2
Remove explaining comment and pam_unix commented out, now pam_unix can be
...
chained with pam_opie
2002-01-19 07:32:47 +00:00
ache
7d37cdbb25
Change comment since fallback provided now not by ftpd but by pam_opie
2002-01-19 03:35:39 +00:00
des
7eccb0369d
Unmunge the version preservation code and obfuscate it so CVS won't munge
...
it all over again.
2002-01-12 23:08:59 +00:00
des
ae62dc6f66
Back out previous commit, which erroneously removed essential comments. I
...
definitely need coffee.
Apologies to: ache
2002-01-12 14:22:22 +00:00
des
4b2d1d07d7
Update copyright
2002-01-12 14:17:19 +00:00
des
f37394be47
Sync with pam.conf revision 1.25.
2002-01-12 13:50:33 +00:00
des
965d591c45
Preserve FreeBSD version strings in target files.
2002-01-12 13:50:08 +00:00
ache
fb48ea88e7
Improve pam_unix/opie related ftpd comment even more
2002-01-02 09:51:33 +00:00
ache
90fd0cf3b4
Clarify comment about pam_unix fallback for ftpd
2002-01-01 13:38:01 +00:00
ache
7288636d78
Turn on pam_opie.so for ftpd by default
...
It not affect non-OPIE users
2002-01-01 13:27:11 +00:00
des
8e7db8a91b
Install pam.d files with mode 0644, not 0755.
2001-12-06 23:28:12 +00:00
des
d546e6cd08
Makefile for pam.d configuration files.
...
Sponsored by: DARPA, NAI Labs
2001-12-06 13:16:47 +00:00
des
341beea7b9
Awright, egg on my face. I should have taken more time with this. The
...
conversion script generated the wrong format, so the configuration files
didn't actually work. Good thing I hadn't thrown the switch yet...
Sponsored by: DARPA, NAI Labs (but the f***ups are all mine)
2001-12-05 21:26:00 +00:00
des
9fc2ed638e
pam.d-style configuration, auto-generated from pam.conf.
...
Sponsored by: DARPA, NAI Labs
2001-12-05 21:06:21 +00:00
des
07f27091df
Short README for /etc/pam.d, mostly extracted from the comments in pam.conf.
2001-12-05 20:59:38 +00:00
des
4366dec8fb
Perl script that splits pam.conf into separate files suitable for pam.d.
...
Sponsored by: DARPA, NAI Labs
2001-12-05 20:58:39 +00:00
