pam_tacplus.git/libtac/lib, branch v1.5.0-beta.2

RAND_pseudo_bytes() has been deprecated in OpenSSL 1.1.0. They tell us

2017-12-29T22:10:59+00:00

to use RAND_bytes() instead. Modified by Philip Prindeville

linux/random.h doesn't actually declare getrandom()

2017-12-29T21:36:43+00:00

Fix compile-time warnings

2017-12-29T21:36:09+00:00

Do not set password for ASCII login

2017-06-14T23:50:56+00:00

For ASCII login, data field is not used ([1] Section 9.0.2 Inbound ASCII Login). So do not add the user password for the login authentication with type ASCII. [1] https://tools.ietf.org/html/draft-grant-tacacs-02

Merge pull request #80 from pprindeville/reorg-magic

2016-12-21T02:58:02+00:00

Reorg magic

Fix damage from PR #71

2016-12-11T23:04:23+00:00

Provide magic function when compiling against openssl

2016-12-05T21:52:10+00:00

Simplify initialization of magic function

2016-12-05T21:52:10+00:00

The pseudo-random number function magic() needs to be primed via magic_init() before being invoked. The standard (but klunky) way of handling this is with a static bool inside the function which indicates whether initialization has happened, and if not, handles initialization and then sets the flag. Sometimes it's more desireable to have initialization happen in a known order before program execution starts (this helps with reproducibility). We can do this by indicating to the compiler/ linker that particular functions need to be executed after __start() but before main().

Fix sense of test for header and library

2016-12-05T21:52:10+00:00

Fix ASCII logins where 2 transactions are required

2016-11-11T18:21:46+00:00

authenticate() doesn't handle the case of an ASCII login which results in a continue request being required to complete the transaction.