libnss-tacplus.git, branch T6613-tacacs NSS plugin to lookup tacacs client username, and match mapped user after login (mirror of https://github.com/vyos/libnss-tacplus.git) https://git.amelek.net/vyos/libnss-tacplus.git/atom?h=T6613-tacacs 2024-12-15T09:41:23+00:00 config: improve line buffer for config file from 256 -> 2048 byte 2024-12-15T09:41:23+00:00 Christian Breunig christian@breunig.cc 2024-12-15T08:37:51+00:00 urn:sha1:9a80c753dc698405e427f413851981694c9db7d8 Support extensive length of exclude_users to avoid truncation in VyOS. Debian: bump compat 9 -> 11 2024-11-22T20:14:22+00:00 Christian Breunig christian@breunig.cc 2024-11-22T20:14:22+00:00 urn:sha1:3ead03af50c2969acef9d7c01be085e76b2f9249 Define -Wno-error=address for pointer operand to fix build with recent GCC 2024-11-21T19:10:08+00:00 Christian Breunig christian@breunig.cc 2024-11-21T19:06:14+00:00 urn:sha1:4d834fcd8f37c62a9674d9d2ed98bce291c30173 Import version 1.0.4-cl5.1.0u11 from Cumulus Linux 2024-04-29T18:58:47+00:00 Christian Breunig christian@breunig.cc 2024-04-29T18:58:47+00:00 urn:sha1:049d2843b521d15e2f355430d94eb9d2e83311be Fixed remove to clean up plugin entries in nsswitch.conf 2017-06-30T20:46:36+00:00 Dave Olson olson@cumulusnetworks.com 2017-06-23T21:07:35+00:00 urn:sha1:19008ab68d9d504aa58eb34d5f564755a1613b8b We weren't removing the tacplus plugin from nsswitch.conf on package remove, now we do. Also cleaned up a bit and use \s instead of [ \t] for whitespace. For postinst, moved into configure case where it belonged. Updated changelog for recent fixes and bumped version Another reset config bug if exclude_users not in config file. 2017-05-30T22:08:42+00:00 Dave Olson olson@cumulusnetworks.com 2017-05-26T00:35:41+00:00 urn:sha1:6f721d9b26465ffd0e05a2f075ad76dd70c4fe8c When re-using a secret key for multiple servers, strdup, don't copy 2017-05-25T20:52:34+00:00 Dave Olson olson@cumulusnetworks.com 2017-05-25T19:58:38+00:00 urn:sha1:86f2c6782d0e59e633ec7ae44132fc4f46a32aaa Otherwise when reconfiguring when we detect a changed config file, we'll double free the strdup'ed memory. Removed trailing whitespace 2017-05-24T02:01:32+00:00 Dave Olson olson@cumulusnetworks.com 2017-05-24T02:01:32+00:00 urn:sha1:42330b84d2c146abb1b3118670d25f24f9a2b23d Merge with ongoing development 2017-05-24T00:16:10+00:00 Dave Olson olson@cumulusnetworks.com 2017-05-24T00:16:10+00:00 urn:sha1:957489a8455daa69d03fdfef7d3f4c19b1499157 Conflicts (whitespace): debian/copyright nss_tacplus.c Support using and returning per-tacacs user homedir 2017-05-24T00:05:52+00:00 Dave Olson olson@cumulusnetworks.com 2017-03-24T05:42:24+00:00 urn:sha1:9b056a2a66ec7006d86121509ef1049c7f6f0725 Get setting from map on whether login was set up to use per-tacacs user homedir, rather than the homedir from the local tacacsN users. The mkhomedir_helper program is used in pam_tacplus to create home directory (like pam_mkhomedir.so) when user homedir is requested, but the home directory does not exist. The config file setting in this code is not used when using map and the user is found in map; we then use the setting from the map. When mapping doesn't exist, then use our own config setting. user_homedirs is ignored if shell is a restricted shell (as set up by tacplus-restrict) because we need to honor the per-command authorization setup in that case. Updated changelog Also fixed up the spelling of dev-support