pam_tacplus.git - (mirror of https://github.com/vyos/pam

Age	Commit message (Collapse)	Author
2016-10-04	Make TACDEBUG and TACSYSLOG into varargs macros	Philip Prindeville
	Also, correct the -DTACDEBUG_AT_RUNTIME scenario so that TACDEBUG() binds correct when used in an if-body with an else following it, e.g.: if (test) TACDEBUG(LOG_DEBUG, "test is true"); else return; would previously have ended up as expanding to: if (test) if (tac_debug_enable) logmsg(LOG_DEBUG, "test is true"); else return; with the indent redone to reflect the nesting correctly. This now expands (correctly) to: if (test) do { if (tac_debug_enable) logmsg(LOG_DEBUG, "test is true"); } while (0); else return;
2016-10-04	More factoring of the cleanup code for tac_connect_single	Philip Prindeville
	Commit 654b79e removed a very similar check, but with the new common exit strategy for this function, it is in fact possible to have fd be set without having copied fd into retval (i.e. retval still being set to an error value, which is negative).
2016-10-04	Exit tac_connect_single consistently via bottom of function	Philip Prindeville
	This is so that tracing is always the same, even when exceptions occur.
2016-07-23	Fix warnings	Paweł Krawczyk
	Fix various declaration inconsistencies that were throwing compiler warnings
2016-05-02	retval cannot be negative when fd is positive as it was just copied from fd	Paweł Krawczyk

2015-10-26	Merge pull request #37 from gollub/fix/connection_timeout_leak	Paweł Krawczyk
	Avoid socket leaks on connection timeouts
2015-10-09	Avoid socket leaks on connection timeouts	Daniel Gollub
	... and other not covered error conditions.
2015-08-06	tac_connect_single: individual timeout	Daniel Gollub
	Allow to configure an individual timeout per TACACS+ server. Bumped SO-version due to API change.
2015-06-29	Fix missing semicolons	David Stapleton

2015-06-19	close socket if any operation fails	Paweł Krawczyk

2015-06-18	Make socket creation errno verbose	Daniel Gollub

2014-10-10	Add source addr parameter for tac_connect_single	Daniel Gollub
	This allows to specify from which source address/interface the TACACS+ client connection gets initiated. Bump SO-versioning due to API change.
2013-03-28	fixes various memory leaks, really	Walter de Jong

2013-03-28	added FIXME remark about leaking memory	Walter de Jong

2013-03-27	same thing, but less confusing	Walter de Jong
	Note that this does not change anything in regards to buffer overflowing
2013-03-27	if key is set	Walter de Jong

2012-10-02	errno = 0 on AIX with non-blocking IO, we need to fix this in a	Jeroen Nijhof
	better way
2012-09-16	Rearrange header file include for libtac	Jeroen Nijhof

2012-07-25	tac_encryption fully handled by libtac	Jeroen Nijhof

2012-03-18	Changed e-mail and improved accounting	Jeroen Nijhof

2011-08-19	Finally got rid of all goto illness!	Jeroen

2011-08-19	Major contribution by Darren Besler	Jeroen

2011-04-25	Removed encrypt option just check if there is a secret (key).	Jeroen
	Removed first_hit option because you can get the same behaviour by using only one server. Added multiple secret support, you can now specify different secrets (keys) for different servers. connect.c: improved connection error handling by using getpeername() to check if connection is still valid. This was needed since we are using non-blocking sockets. Properly handle multiple servers when authenticating, patch from Gregg Nemas, thanks!
2010-12-22	Initial commit	Jeroen Nijhof