c4c1d3c115
* drop configuration settings that duplicated library settings * drop the existing_ticket option * drop krb4 support * add support for preserving configuration information in ccaches * add support for creating and cleaning up DIR: ccaches * finish cleaning up KEYRING: ccaches * add experimental "armor" and "armor_strategy" options * handle creation of /run/user/XXX for FILE: and DIR: caches * handle different function signatures for krb5_trace_callback * avoid overriding the primary when updating DIR: caches - obsolets patches (upstream): * pam_krb5-2.2.0-0.5-configure_ac.dif * use-urandom-for-tests.dif OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam_krb5?expand=0&rev=26
93 lines
3.2 KiB
Plaintext
93 lines
3.2 KiB
Plaintext
Index: pam_krb5-2.4.4/src/acct.c
|
|
===================================================================
|
|
--- pam_krb5-2.4.4.orig/src/acct.c
|
|
+++ pam_krb5-2.4.4/src/acct.c
|
|
@@ -89,6 +89,10 @@ pam_sm_acct_mgmt(pam_handle_t *pamh, int
|
|
_pam_krb5_free_ctx(ctx);
|
|
return PAM_SERVICE_ERR;
|
|
}
|
|
+ if (options->debug) {
|
|
+ debug("pam_acct_mgmt called for '%s', realm '%s'", user,
|
|
+ options->realm);
|
|
+ }
|
|
|
|
/* Get information about the user and the user's principal name. */
|
|
userinfo = _pam_krb5_user_info_init(ctx, user, options);
|
|
Index: pam_krb5-2.4.4/src/auth.c
|
|
===================================================================
|
|
--- pam_krb5-2.4.4.orig/src/auth.c
|
|
+++ pam_krb5-2.4.4/src/auth.c
|
|
@@ -108,9 +108,10 @@ pam_sm_authenticate(pam_handle_t *pamh,
|
|
return PAM_SERVICE_ERR;
|
|
}
|
|
if (options->debug) {
|
|
- debug("called to authenticate '%s', realm '%s'", user,
|
|
- options->realm);
|
|
+ debug("pam_authenticate called for '%s', realm '%s'", user,
|
|
+ options->realm);
|
|
}
|
|
+
|
|
_pam_krb5_set_init_opts(ctx, gic_options, options);
|
|
|
|
/* Prompt for the password, as we might need to. */
|
|
@@ -432,6 +433,11 @@ int
|
|
pam_sm_setcred(pam_handle_t *pamh, int flags,
|
|
int argc, PAM_KRB5_MAYBE_CONST char **argv)
|
|
{
|
|
+ notice("pam_setcred (%s) called",
|
|
+ (flags & PAM_ESTABLISH_CRED)?"establish credential":
|
|
+ (flags & PAM_REINITIALIZE_CRED)?"reinitialize credential":
|
|
+ (flags & PAM_REFRESH_CRED)?"refresh credential":
|
|
+ (flags & PAM_DELETE_CRED)?"delete credential":"unknown flag");
|
|
if (flags & PAM_ESTABLISH_CRED) {
|
|
return _pam_krb5_open_session(pamh, flags, argc, argv,
|
|
"pam_setcred(PAM_ESTABLISH_CRED)",
|
|
Index: pam_krb5-2.4.4/src/password.c
|
|
===================================================================
|
|
--- pam_krb5-2.4.4.orig/src/password.c
|
|
+++ pam_krb5-2.4.4/src/password.c
|
|
@@ -110,6 +110,16 @@ pam_sm_chauthtok(pam_handle_t *pamh, int
|
|
_pam_krb5_free_ctx(ctx);
|
|
return PAM_SERVICE_ERR;
|
|
}
|
|
+ if (options->debug) {
|
|
+ debug("pam_chauthtok called (%s) for '%s', realm '%s'",
|
|
+ (flags & PAM_PRELIM_CHECK) ?
|
|
+ "preliminary check" :
|
|
+ ((flags & PAM_UPDATE_AUTHTOK) ?
|
|
+ "updating authtok":
|
|
+ "unknown phase"),
|
|
+ user,
|
|
+ options->realm);
|
|
+ }
|
|
_pam_krb5_set_init_opts(ctx, gic_options, options);
|
|
|
|
/* Get information about the user and the user's principal name. */
|
|
Index: pam_krb5-2.4.4/src/session.c
|
|
===================================================================
|
|
--- pam_krb5-2.4.4.orig/src/session.c
|
|
+++ pam_krb5-2.4.4/src/session.c
|
|
@@ -97,6 +97,10 @@ _pam_krb5_open_session(pam_handle_t *pam
|
|
_pam_krb5_free_ctx(ctx);
|
|
return PAM_SERVICE_ERR;
|
|
}
|
|
+ if (options->debug) {
|
|
+ debug("pam_open_session called for '%s', realm '%s'", user,
|
|
+ options->realm);
|
|
+ }
|
|
|
|
/* If we're in a no-cred-session situation, return. */
|
|
if ((!options->cred_session) &&
|
|
@@ -301,7 +305,10 @@ _pam_krb5_close_session(pam_handle_t *pa
|
|
_pam_krb5_free_ctx(ctx);
|
|
return PAM_SUCCESS;
|
|
}
|
|
-
|
|
+ if (options->debug) {
|
|
+ debug("pam_close_session called for '%s', realm '%s'", user,
|
|
+ options->realm);
|
|
+ }
|
|
/* Get information about the user and the user's principal name. */
|
|
userinfo = _pam_krb5_user_info_init(ctx, user, options);
|
|
if (userinfo == NULL) {
|