libnss-tacplus.git/nss_tacplus.c, branch rolling NSS plugin to lookup tacacs client username, and match mapped user after login (mirror of https://github.com/vyos/libnss-tacplus.git) https://git.amelek.net/vyos/libnss-tacplus.git/atom?h=rolling 2026-01-20T05:23:09+00:00 T8083: Review comments incorporate 2026-01-20T05:23:09+00:00 Ritika Chopra r.chopra@vyos.io 2026-01-08T05:02:25+00:00 urn:sha1:c3a10531b21f2135ae3fd583116cf799e6c21fd9 - Replace tabs with spaces - Handle corner case when no of users get changed in between processing T8083: Address memory leaks in the related code leg 2026-01-06T17:13:14+00:00 Ritika Chopra r.chopra@vyos.io 2026-01-06T17:13:14+00:00 urn:sha1:3a5c91e6fc4ba64d5e922a7f3b5d1b5ed38ba3f7 T8083:Fix NSS TACACS group buffer truncation 2026-01-06T17:07:56+00:00 Ritika Chopra r.chopra@vyos.io 2026-01-06T17:07:56+00:00 urn:sha1:9a57723bb67d9a9b8b27f42262e10b2b03658b35 config: improve line buffer for config file from 256 -> 2048 byte 2024-12-15T09:41:23+00:00 Christian Breunig christian@breunig.cc 2024-12-15T08:37:51+00:00 urn:sha1:9a80c753dc698405e427f413851981694c9db7d8 Support extensive length of exclude_users to avoid truncation in VyOS. Import version 1.0.4-cl5.1.0u11 from Cumulus Linux 2024-04-29T18:58:47+00:00 Christian Breunig christian@breunig.cc 2024-04-29T18:58:47+00:00 urn:sha1:049d2843b521d15e2f355430d94eb9d2e83311be Another reset config bug if exclude_users not in config file. 2017-05-30T22:08:42+00:00 Dave Olson olson@cumulusnetworks.com 2017-05-26T00:35:41+00:00 urn:sha1:6f721d9b26465ffd0e05a2f075ad76dd70c4fe8c When re-using a secret key for multiple servers, strdup, don't copy 2017-05-25T20:52:34+00:00 Dave Olson olson@cumulusnetworks.com 2017-05-25T19:58:38+00:00 urn:sha1:86f2c6782d0e59e633ec7ae44132fc4f46a32aaa Otherwise when reconfiguring when we detect a changed config file, we'll double free the strdup'ed memory. Removed trailing whitespace 2017-05-24T02:01:32+00:00 Dave Olson olson@cumulusnetworks.com 2017-05-24T02:01:32+00:00 urn:sha1:42330b84d2c146abb1b3118670d25f24f9a2b23d Support using and returning per-tacacs user homedir 2017-05-24T00:05:52+00:00 Dave Olson olson@cumulusnetworks.com 2017-03-24T05:42:24+00:00 urn:sha1:9b056a2a66ec7006d86121509ef1049c7f6f0725 Get setting from map on whether login was set up to use per-tacacs user homedir, rather than the homedir from the local tacacsN users. The mkhomedir_helper program is used in pam_tacplus to create home directory (like pam_mkhomedir.so) when user homedir is requested, but the home directory does not exist. The config file setting in this code is not used when using map and the user is found in map; we then use the setting from the map. When mapping doesn't exist, then use our own config setting. user_homedirs is ignored if shell is a restricted shell (as set up by tacplus-restrict) because we need to honor the per-command authorization setup in that case. Updated changelog Also fixed up the spelling of dev-support Fix attribute memory leak, clarified authorization message 2017-05-23T23:42:59+00:00 Dave Olson olson@cumulusnetworks.com 2017-05-19T22:48:43+00:00 urn:sha1:1e79d33bc397c0a9f30512a624ce51153e981f89 Fixed attribute memory leak, and also don't force the *attr to NULL as part of that, use the normal mechanisms. Added more info to authorization failure message, and made clearer. Only print "local lookup" part of message if debug > 1, since it's mostly useful for developers.