summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-05-02tac_protocol is a static character array so it will be never NULLPaweł Krawczyk
2016-05-02superfluous syslog format stringPaweł Krawczyk
2016-05-02check packet length declared in headerPaweł Krawczyk
2016-05-02ensure iteration over argument number sent in packet do not overflowPaweł Krawczyk
past the actual packet data
2016-03-28Merge pull request #47 from benschumacher/feature/changepwPaweł Krawczyk
Remove silly comment, fix compilation error
2016-03-28Remove silly comment, fix compilation errorBen Schumacher
Thx @joakim-tjernlund
2016-03-25Merge pull request #45 from benschumacher/feature/changepwPaweł Krawczyk
Password change support for TACACS+
2016-03-25Password change support for TACACS+Ben Schumacher
Allow pam_tacplus to do challenge/response authentication for TAC backends that force password change during authentication flow. Also add support for password change via 'passwd' by implementing pam_sm_chauthtok. Amongst other things, this requires explicitly managing the sequence number for compatability with some versions of Cisco ACS.
2016-03-02Merge pull request #43 from joakim-tjernlund/masterPaweł Krawczyk
autotool build fixes
2016-03-02Add '--disable-am-ldcflags' configure optionJoakim Tjernlund
This will enable a distribution to select its own C/LD flags
2016-03-02Conditional docsJoakim Tjernlund
Add --disable-doc to not install docs
2016-03-02Disable automatic build of static libsJoakim Tjernlund
Instruct libtool not to build static libs at all rather than removing the static lib at install
2016-03-02Fix out of src buildsJoakim Tjernlund
Fix building in a separate build dir.
2016-03-02Fix warning: "_FORTIFY_SOURCE" redefinedJoakim Tjernlund
Undefine _FORTIFY_SOURCE before defining it as some system has FORTIFY_SOURCE on by default.
2015-10-26Merge pull request #37 from gollub/fix/connection_timeout_leakPaweł Krawczyk
Avoid socket leaks on connection timeouts
2015-10-26Merge pull request #32 from gollub/feature/connect_timeoutPaweł Krawczyk
tac_connect_single: individual timeout
2015-10-09Avoid socket leaks on connection timeoutsDaniel Gollub
... and other not covered error conditions.
2015-08-06tac_connect_single: individual timeoutDaniel Gollub
Allow to configure an individual timeout per TACACS+ server. Bumped SO-version due to API change.
2015-06-29Merge pull request #31 from DStape/fix-missing-semicolonsPaweł Krawczyk
Fix missing semicolons
2015-06-29Fix missing semicolonsDavid Stapleton
2015-06-20tac_service is a static array so it's never NULLPaweł Krawczyk
2015-06-20tac_login is a static array so it's never NULLPaweł Krawczyk
2015-06-19check open() result including 0 which is a valid return valuePaweł Krawczyk
2015-06-19remove obsolete comment about PAM_DISALLOW_NULL_AUTHTOKPaweł Krawczyk
2015-06-19close socket if any operation failsPaweł Krawczyk
2015-06-19Merge branch 'master' of github.com:jeroennijhof/pam_tacplusPaweł Krawczyk
2015-06-19initialise the seed variable and update commentsPaweł Krawczyk
2015-06-18Merge pull request #29 from gollub/fix/verbose_socket_errnoPaweł Krawczyk
Make socket creation errno verbose
2015-06-18Make socket creation errno verboseDaniel Gollub
2015-06-17add Coverity scan statusPaweł Krawczyk
2014-12-15Added port support for IPv6, issue #25Jeroen Nijhof
2014-12-15Merge pull request #26 from benschumacher/masterjeroennijhof
Fix TACACS+ timeouts in pam_tacplus
2014-12-08If a timeout is configured by PAM, make sure we set theBen Schumacher
tac_readtimeout_enable to a non-zero value to get TACACS+ timeouts to work as expected.
2014-11-27too many RELROsPawel Krawczyk
2014-11-26give up AX_ macros as they don't work on older autoconf, usePawel Krawczyk p.krawczyk@kainos.com
a more conservative method instead
2014-11-26Merge branch 'master' of github.com:jeroennijhof/pam_tacplusPawel Krawczyk
2014-11-26check for PAM devel librariesPawel Krawczyk
2014-11-26close rfdPawel Krawczyk
2014-11-26rewrite the PRNG logic to use urandom on srand() only and then returnPawel Krawczyk
random() on subsequent calls
2014-11-26add -WallPawel Krawczyk
2014-11-21Merge pull request #21 from gollub/fix/reduce_log_leveljeroennijhof
Reduce loglevel for non-critical author messages
2014-11-20Reduce loglevel for non-critical author messagesDaniel Gollub
Messages like "Args cnt %d", "Adding buf/value pair (%s,%s)" should not flood syslog as warning.
2014-10-14add Jeroen as primary author and list others from GitHub1.3.9Pawel Krawczyk
2014-10-14bump version to 1.3.9, mostly due to file descriptor leak fixPawel Krawczyk
2014-10-14Merge pull request #18 from pwdng/masterPaweł Krawczyk
Close /dev/urandom to fix open file handler leak.
2014-10-14Close /dev/urandom to fix open file handler leak.pwdng
2014-10-10Merge pull request #17 from gollub/feature/client_connect_source_address_v4Paweł Krawczyk
Add source addr parameter for tac_connect_single
2014-10-10Add source addr parameter for tac_connect_singleDaniel Gollub
This allows to specify from which source address/interface the TACACS+ client connection gets initiated. Bump SO-versioning due to API change.
2014-10-08Merge pull request #16 from gollub/fix/debian_build_for_ax_check_compile_flagPaweł Krawczyk
Fix/debian build for ax check compile flag
2014-10-08Whitespace fixDaniel Gollub