RepoMirrors
/
openssh
mirror of git://anongit.mindrot.org/openssh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openssh/auth-pam.h

48 lines
1.9 KiB
C
Raw Normal View History

- (stevesk) [auth-pam.h] license
2002-07-21 23:16:00 +00:00
/*
* Copyright (c) 2000 Damien Miller. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/
- (djm) Add CVS Id's to files that we have missed
2001-02-09 01:55:35 +00:00
- Removed most of the pam code into its own file auth-pam.[ch]. This cleaned up sshd.c up significantly. - Several other cleanups
1999-12-30 04:08:44 +00:00
#include "includes.h"
#ifdef USE_PAM
upstream: switch over to the new authorized_keys options API and remove the legacy one. Includes a fairly big refactor of auth2-pubkey.c to retain less state between key file lines. feedback and ok markus@ OpenBSD-Commit-ID: dece6cae0f47751b9892080eb13d6625599573df
2018-03-03 03:15:51 +00:00
struct ssh;
remove PAM dependencies on old packet API Requires some caching of values, because the PAM code isn't always called with packet context.
2019-01-19 23:22:18 +00:00
void start_pam(struct ssh *);
- Removed most of the pam code into its own file auth-pam.[ch]. This cleaned up sshd.c up significantly. - Several other cleanups
1999-12-30 04:08:44 +00:00
void finish_pam(void);
- (djm) Bug #564: Perform PAM account checks for all authentications when UsePAM=yes; ok dtucker
2003-08-25 03:08:49 +00:00
u_int do_pam_account(void);
upstream: switch over to the new authorized_keys options API and remove the legacy one. Includes a fairly big refactor of auth2-pubkey.c to retain less state between key file lines. feedback and ok markus@ OpenBSD-Commit-ID: dece6cae0f47751b9892080eb13d6625599573df
2018-03-03 03:15:51 +00:00
void do_pam_session(struct ssh *);
upstream: Start the process of splitting sshd into separate binaries. This step splits sshd into a listener and a session binary. More splits are planned. After this changes, the listener binary will validate the configuration, load the hostkeys, listen on port 22 and manage MaxStartups only. All session handling will be performed by a new sshd-session binary that the listener fork+execs. This reduces the listener process to the minimum necessary and sets us up for future work on the sshd-session binary. feedback/ok markus@ deraadt@ NB. if you're updating via source, please restart sshd after installing, otherwise you run the risk of locking yourself out. OpenBSD-Commit-ID: 43c04a1ab96cdbdeb53d2df0125a6d42c5f19934
2024-05-17 00:30:23 +00:00
void do_pam_setcred(void);
function prototype and definition consistency cleanup.
2000-10-14 15:08:49 +00:00
void do_pam_chauthtok(void);
- (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson.
2003-08-26 01:58:16 +00:00
int do_pam_putenv(char *, char *);
- (djm) Sync auth-pam.h with what we actually implement
2003-05-19 01:28:44 +00:00
char ** fetch_pam_environment(void);
- (djm) Export environment variables from authentication subprocess to parent. Part of Bug #717
2003-11-17 10:41:42 +00:00
char ** fetch_pam_child_environment(void);
- (djm) Sync auth-pam.h with what we actually implement
2003-05-19 01:28:44 +00:00
void free_pam_environment(char **);
- (dtucker) [auth-pam.c auth-pam.h session.c] Make PAM use the new static cleanup functions. With & ok djm@
2003-10-07 01:30:15 +00:00
void sshpam_thread_cleanup(void);
void sshpam_cleanup(void);
- (dtucker) [auth-pam.c auth-pam.h auth-passwd.c]: Bug #874: Re-add PAM support for PasswordAuthentication=yes. ok djm@
2004-05-30 10:43:59 +00:00
int sshpam_auth_passwd(Authctxt *, const char *);
Handle PAM_MAXTRIES from modules. bz#2249: handle the case where PAM returns PAM_MAXTRIES by ceasing to offer password and keyboard-interative authentication methods. Should prevent "sshd ignoring max retries" warnings in the log. ok djm@ It probably won't trigger with keyboard-interactive in the default configuration because the retry counter is stored in module-private storage which goes away with the sshd PAM process (see bz#688). On the other hand, those cases probably won't log a warning either.
2016-07-17 23:33:25 +00:00
int sshpam_get_maxtries_reached(void);
void sshpam_set_maxtries_reached(int);
- (dtucker) [auth-pam.c auth-pam.h session.c] Bug #890: Send output from failing PAM session modules to user then exit, similar to the way /etc/nologin is handled. ok djm@
2004-09-11 12:17:26 +00:00
int is_pam_session_open(void);
- Removed most of the pam code into its own file auth-pam.[ch]. This cleaned up sshd.c up significantly. - Several other cleanups
1999-12-30 04:08:44 +00:00
#endif /* USE_PAM */