summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-10-08Fix Debian build failing on AX_CHECK_COMPILE_FLAGDaniel Gollub
2014-10-02C compiler hardening optionsPawel Krawczyk
Add checks for C compiler hardening options (stack protector etc) and use them if available.
2014-10-02Fix always true conditionPawel Krawczyk
The condition was checking tac_prompt which is a static array, so it will always return some address. Now checking the value of the first element of the array, which can be zero on non-zero.
2014-09-18Merge pull request #14 from gollub/fix_debian_packagingPaweł Krawczyk
Fix Debian packaging due to README markdown rename
2014-09-18Merge pull request #13 from gollub/shared_libtacPaweł Krawczyk
[RFC] Build and install libtac as shared library
2014-09-18Merge pull request #15 from grwlf/masterPaweł Krawczyk
allow authorization without protocol defined
2014-09-18allow authorization without protocol definedSergey Mironov
Protocol is only required for certain subset of services, mainly for ppp. We allow authorization with empty protocol if user wants to use other service names, like 'ssh' From the http://tools.ietf.org/html/draft-grant-tacacs-02 page 30: The protocol attribute is intended for use with PPP. When service equals "ppp" and protocol equals "lcp", the message describes the PPP link layer service. For other values of protocol, this describes a PPP NCP (network layer service). A single PPP session can support multiple NCPs
2014-09-05Fix include directory in pkg-config fileDaniel Gollub
All headers are stored in the libtac sub-directory.
2014-08-28Introduce pkg-config file for libtacDaniel Gollub
2014-08-28debian: Introduce shahred library packaging libtacDaniel Gollub
2014-08-28Fix Debian packaging due to README markdown renameDaniel Gollub
Regression introduced with ea841487
2014-08-27Build and install libtac as shared libraryDaniel Gollub
Additional install public headers for libtac shared library. SO-Versioning is initially set to 0:0:0.
2014-04-22Added macro dir and fix readme issueJeroen Nijhof
2014-04-22Added install instructionjeroennijhof
2014-04-22Markup extentionJeroen Nijhof
2014-04-22Use markup for READMEJeroen Nijhof
2014-04-22Merge pull request #8 from walterdejong/masterjeroennijhof
Thanks guys! But the pam_sm_authenticate() function was indeed looping over the tac_plus servers for authentication. The problem is when a tac_plus server is not working correctly you will be denied during authentication but I agree we need to find a better solution for that issue.
2014-04-18Merge pull request #10 from jeroennijhof/hotfix_9jeroennijhof
Fix issue with automake 1.9
2014-04-16Fix issue with automake 1.9Jeroen Nijhof
2014-02-19cleanup redundant codeWalter de Jong
2014-02-19bugfix: do not try other server when AUTHEN_STATUS_FAILWalter de Jong
The loop would continue to try other servers even when a server has indicated that the authentication failed (wrong password!!) Also, try talk the protocol as much as possible. The PAM status is AUTHINFO_UNAVAIL unless a tacacs server has responded with PASS (-> PAM status SUCCESS) or FAIL (-> PAM status ERR)
2014-02-19delete extraneous whitespaceWalter de Jong
2014-02-19Merge branch 'master' of github.com:walterdejong/pam_tacplusWalter de Jong
2014-02-19run libtoolize tooWalter de Jong
2014-02-17Added postinst and prerm for pam-auth-updateJeroen Nijhof
2014-01-31Added automake subdir-objects option1.3.8Jeroen Nijhof
2013-12-20Fixed mismatch between compat and debhelper versionJeroen Nijhof
2013-12-17Release version 1.3.8Jeroen Nijhof
2013-07-01A lot of cleanups and improvements by Walter de JongJeroen Nijhof
2013-06-06run libtoolize tooWalter de Jong
2013-04-28active_server can not be a pointer, data lost after authentication.Jeroen Nijhof
2013-04-28/dev/urandom improvements, thanks Walter. Fixed active_server checkJeroen Nijhof
2013-04-28Merge pull request #6 from walterdejong/masterchalcy0n
cleanup stuff
2013-03-29abort() on erroneous input parametersWalter de Jong
2013-03-29xstrcpy() belongs in libtacWalter de Jong
2013-03-29xstrcpy() aborts on argument too longWalter de Jong
Which may be dumb, but it's better than bluntly truncating a string
2013-03-29removed double xcalloc() function; do not leak memory for these small ↵Walter de Jong
buffers; added safe xstrcpy()
2013-03-28fixes various memory leaks, reallyWalter de Jong
2013-03-28server is a struct { address, key }Walter de Jong
2013-03-28added FIXME remark about leaking memoryWalter de Jong
2013-03-28just them prototypesWalter de Jong
2013-03-28more stuff belongs in headersWalter de Jong
2013-03-28stuff belongs in an include fileWalter de Jong
2013-03-28added FIXME remark for ifdef for existence of /dev/urandomWalter de Jong
2013-03-28magic is always initedWalter de Jong
2013-03-28handle read() errorsWalter de Jong
2013-03-28remove unnecessary ifdef __platform__ constructionsWalter de Jong
2013-03-28Merge pull request #5 from walterdejong/masterchalcy0n
some code cleanups
2013-03-27same thing, but less confusingWalter de Jong
Note that this does not change anything in regards to buffer overflowing
2013-03-27ignore vim swap filesWalter de Jong
generated by cgit v1.2.3 (git 2.39.1) at 2025-08-25 20:47:46 +0000