[tac_plus] PAM support for PAP

Daniel Schmidt daniel.schmidt at wyo.gov
Tue Jan 31 23:14:54 UTC 2017


My apologies for the necromancy, but I noticed something concerning this
old thread.   Being required to use the AFL patch, I am stuck on version
F4.0.4.19.  However, I noticed the patch is missing the modifications to
pwlib.c. This patch will not work as is, at least not in 4.0.4.19.  I
believe an example of the correct modifications are here:

http://www.shrubbery.net/pipermail/tac_plus/2008-October/000282.html

Thank you,
-Dan

On Tue, Mar 20, 2012 at 4:23 PM, john heasley <heas at shrubbery.net> wrote:

> Fri, Mar 16, 2012 at 11:25:31PM +0100, Jeroen Nijhof:
> > Dear John,
> >
> > Since I've noticed my old pam patch for pap is still used I've decided
> > to rewrite the patch.
> >
> > Attached you can find the patch which will enable PAM support for PAP. I
> > used the 4.0.4.23 branch but it also works for 4.0.4.19 and 4.0.4.22.
> >
> > Maybe it's worth to integrate the patch with the upstream code?
>
> got it.  thanks, Jeroen.
>
> > Thanks!
> >
> > With kind regards,
> > Jeroen Nijhof
>
> > diff -ur tacacs+-F4.0.4.23.orig/config.c tacacs+-F4.0.4.23/config.c
> > --- tacacs+-F4.0.4.23.orig/config.c   2012-01-24 01:05:22.000000000
> +0100
> > +++ tacacs+-F4.0.4.23/config.c        2012-03-16 22:15:38.835033501 +0100
> > @@ -86,6 +86,7 @@
> >  #endif
> >                               pap     = cleartext <string> |
> >                               pap     = des <string> |
> > +                             pap     = PAM |
> >                               opap    = cleartext <string> |
> >                               global  = cleartext <string> |
> >                               msg     = <string>
> > @@ -1134,6 +1135,12 @@
> >           parse(S_separator);
> >           switch(sym_code) {
> >
> > +#ifdef HAVE_PAM
> > +         case S_pam:
> > +             user->pap = tac_strdup(sym_buf);
> > +             break;
> > +#endif
> > +
> >           case S_cleartext:
> >           case S_des:
> >               sprintf(buf, "%s ", sym_buf);
> > @@ -1143,7 +1150,11 @@
> >               break;
> >
> >           default:
> > -             parse_error("expecting 'cleartext', or 'des' keyword after
> "
> > +             parse_error("expecting 'cleartext', "
> > +#ifdef HAVE_PAM
> > +                         "'PAM', "
> > +#endif
> > +                         "or 'des' keyword after "
> >                           "'pap =' on line %d", sym_line);
> >           }
> >           sym_get();
>
> _______________________________________________
> tac_plus mailing list
> tac_plus at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/tac_plus
>

-- 

E-Mail to and from me, in connection with the transaction 
of public business, is subject to the Wyoming Public Records 
Act and may be disclosed to third parties.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20170131/2d5f8989/attachment.html>


More information about the tac_plus mailing list