pam_krb5: Restore allow_kdc_spoof optionNot only does the new pam_krb5 module not have the same allow_kdc_spoofoption that the old one had, its behavior in this matter defaults toinsecure. Reimp
pam_krb5: Restore allow_kdc_spoof optionNot only does the new pam_krb5 module not have the same allow_kdc_spoofoption that the old one had, its behavior in this matter defaults toinsecure. Reimplement allow_kdc_spoof and switch the default back.Reviewed by: cyDifferential Revision: https://reviews.freebsd.org/D53884
show more ...
pam_krb5: fix the GCC buildGCC doesn't recognise-Wno-error=incompatible-pointer-types-discards-qualifiers.Remove it and just fix the error instead: our pam_message does not havea const msg memb
pam_krb5: fix the GCC buildGCC doesn't recognise-Wno-error=incompatible-pointer-types-discards-qualifiers.Remove it and just fix the error instead: our pam_message does not havea const msg member.Reviewed by: cy, emasteDifferential Revision: https://reviews.freebsd.org/D51575
pam-krb5: Add no_warn dummy optionThis is to avoid throwing unknown option errors for pam.d files thatshould work for the Heimdal pam_krb5 and the MIT friendly pam-krb5.This option will be remove
pam-krb5: Add no_warn dummy optionThis is to avoid throwing unknown option errors for pam.d files thatshould work for the Heimdal pam_krb5 and the MIT friendly pam-krb5.This option will be removed when the pam.d files are cleaned up afterthe removal of Heimdal.Sponsored by: The FreeBSD Foundation
pam-krb5: Import/add pam-krb5 from eyeire.orgFrom https://www.eyrie.org/~eagle/software/pam-krb5/:pam-krb5 provides a Kerberos PAM module that supports authentication,user ticket cache handling,
pam-krb5: Import/add pam-krb5 from eyeire.orgFrom https://www.eyrie.org/~eagle/software/pam-krb5/:pam-krb5 provides a Kerberos PAM module that supports authentication,user ticket cache handling, simple authorization (via .k5login orchecking Kerberos principals against local usernames), and passwordchanging. It can be configured through either options in the PAMconfiguration itself or through entries in the system krb5.conf file,and it tries to work around PAM implementation flaws in commonly-usedPAM-enabled applications such as OpenSSH and xdm. It supports bothPKINIT and FAST to the extent that the underlying Kerberos librariessupport these features.The reason for this import is to provide an MIT KRB5 compatiblepam_krb5 PAM module. The existing pam_krb5 in FreeBS only workswith Heimdal.The Makefiles to hook this software into the build willl come later.Sponsored by: The FreeBSD FoundationAdd 'contrib/pam-krb5/' from commit '24f0b4ca2d565cdbb4fe7839ff28320706bf2386'git-subtree-dir: contrib/pam-krb5git-subtree-mainline: 290e8aaa384085a7f691b2a140b5a904794eb83cgit-subtree-split: 24f0b4ca2d565cdbb4fe7839ff28320706bf2386