From daniel.schmidt at wyo.gov  Thu Feb  2 19:50:59 2017
From: daniel.schmidt at wyo.gov (Daniel Schmidt)
Date: Thu, 2 Feb 2017 12:50:59 -0700
Subject: [tac_plus] PAM support for PAP
In-Reply-To: <CAOyMAKnwZhQqLki3FPEAzCJT4XtgMPSqLKpumKUPNgOuogtPdQ@mail.gmail.com>
References: <4F63BDDB.60409@jeroennijhof.nl>
 <20120320222353.GF39349@shrubbery.net>
 <CAOyMAKnwZhQqLki3FPEAzCJT4XtgMPSqLKpumKUPNgOuogtPdQ@mail.gmail.com>
Message-ID: <CAOyMAKnOtFwbFDRy1rK8kCL2gGdic=sVmLpAhoF+nZEgm2fJMg@mail.gmail.com>

At a quick glance, this also seems to be an issue in the latest code.

Thkx as always,

-Dan

On Tue, Jan 31, 2017 at 4:14 PM, Daniel Schmidt <daniel.schmidt at wyo.gov>
wrote:

> My apologies for the necromancy, but I noticed something concerning this
> old thread.   Being required to use the AFL patch, I am stuck on version
> F4.0.4.19.  However, I noticed the patch is missing the modifications to
> pwlib.c. This patch will not work as is, at least not in 4.0.4.19.  I
> believe an example of the correct modifications are here:
>
> http://www.shrubbery.net/pipermail/tac_plus/2008-October/000282.html
>
> Thank you,
> -Dan
>
> On Tue, Mar 20, 2012 at 4:23 PM, john heasley <heas at shrubbery.net> wrote:
>
>> Fri, Mar 16, 2012 at 11:25:31PM +0100, Jeroen Nijhof:
>> > Dear John,
>> >
>> > Since I've noticed my old pam patch for pap is still used I've decided
>> > to rewrite the patch.
>> >
>> > Attached you can find the patch which will enable PAM support for PAP. I
>> > used the 4.0.4.23 branch but it also works for 4.0.4.19 and 4.0.4.22.
>> >
>> > Maybe it's worth to integrate the patch with the upstream code?
>>
>> got it.  thanks, Jeroen.
>>
>> > Thanks!
>> >
>> > With kind regards,
>> > Jeroen Nijhof
>>
>> > diff -ur tacacs+-F4.0.4.23.orig/config.c tacacs+-F4.0.4.23/config.c
>> > --- tacacs+-F4.0.4.23.orig/config.c   2012-01-24 01:05:22.000000000
>> +0100
>> > +++ tacacs+-F4.0.4.23/config.c        2012-03-16 22:15:38.835033501
>> +0100
>> > @@ -86,6 +86,7 @@
>> >  #endif
>> >                               pap     = cleartext <string> |
>> >                               pap     = des <string> |
>> > +                             pap     = PAM |
>> >                               opap    = cleartext <string> |
>> >                               global  = cleartext <string> |
>> >                               msg     = <string>
>> > @@ -1134,6 +1135,12 @@
>> >           parse(S_separator);
>> >           switch(sym_code) {
>> >
>> > +#ifdef HAVE_PAM
>> > +         case S_pam:
>> > +             user->pap = tac_strdup(sym_buf);
>> > +             break;
>> > +#endif
>> > +
>> >           case S_cleartext:
>> >           case S_des:
>> >               sprintf(buf, "%s ", sym_buf);
>> > @@ -1143,7 +1150,11 @@
>> >               break;
>> >
>> >           default:
>> > -             parse_error("expecting 'cleartext', or 'des' keyword
>> after "
>> > +             parse_error("expecting 'cleartext', "
>> > +#ifdef HAVE_PAM
>> > +                         "'PAM', "
>> > +#endif
>> > +                         "or 'des' keyword after "
>> >                           "'pap =' on line %d", sym_line);
>> >           }
>> >           sym_get();
>>
>> _______________________________________________
>> tac_plus mailing list
>> tac_plus at shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo.cgi/tac_plus
>>
>
>

-- 

E-Mail to and from me, in connection with the transaction 
of public business, is subject to the Wyoming Public Records 
Act and may be disclosed to third parties.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20170202/3fe40dfb/attachment.html>