2021-04-09 Klas Lindfors * NEWS: Version 2.27 2021-04-09 Klas Lindfors * README: doc: drop the travis badge since we're not using travis any more 2021-04-09 Klas Lindfors * tests/aux/build-and-test.sh, tests/pam_test.c: tests: add a define for running the mysql tests they require a correctly set up server and all 2021-04-09 Klas Lindfors * README: doc: add README documentation for mysql options 2021-04-08 Klas Lindfors * Makefile.am: build: include ykbzero.h in sources so it gets included in dist 2021-04-08 Klas Lindfors * NEWS: NEWS: news for upcoming 2.27 release 2021-04-08 Klas Lindfors * tests/pam_test.c: sql: test failure cases 2021-04-07 Klas Lindfors * : commit 23fb773279ed0d4bedb1ef3cdd8840b1cf9acb9a Author: Klas Lindfors Date: Tue Apr 6 13:48:42 2021 +0200 2021-04-06 Klas Lindfors * .github/workflows/build_and_test.yml: ci: always end tests with displaying logs 2021-04-06 Klas Lindfors * .github/workflows/build_and_test.yml, tests/aux/auth_mapping.sql: sql: more setup for sql tests 2021-04-01 Klas Lindfors * pam_yubico.8.txt, pam_yubico.c, util.c, util.h: sql: add mysql_port configuration 2021-04-01 Klas Lindfors * .github/workflows/build_and_test.yml, tests/aux/build-and-test.sh: ci: add database service for mysql builds 2021-04-01 Klas Lindfors * yubikey_mapping.sql: sql: add schema for yubikey_mapping 2021-04-01 Klas Lindfors * .github/workflows/build_and_test.yml: ci: drop all CC and just use whatever 2021-04-01 Klas Lindfors * : commit 93c8229ea1e51cd82ce566f33ddfbb564569fa9a Author: Klas Lindfors Date: Wed Mar 31 12:54:56 2021 +0200 2021-03-31 Klas Lindfors * util.c: mysql: use the .is_null_value member of the MYSQL_BIND structure instead of setting a pointer, this seems to have better API compatibility, also get rid of the error member that was never checked. 2021-03-31 Klas Lindfors * .github/workflows/build_and_test.yml: ci: add mysql test job 2021-03-31 Klas Lindfors * .github/workflows/build_and_test.yml, .travis.yml: ci: start porting tests to github actions 2021-01-12 Klas Lindfors * util.c: mysql: is_null and error should be my_bool not bool 2021-01-12 Klas Lindfors * : commit b708e6dcf15d85efcff088e41c52c7bbb603358f Author: Benjamin AIMARD Date: Sat Nov 28 12:26:39 2020 +0100 2020-12-01 Gabriel Kihlman * .github/workflows/codeql-analysis.yml: actions: apt update 2020-06-15 Gabriel Kihlman * .github/workflows/codeql-analysis.yml: actions: CodeQL scanner 2020-08-03 Gabriel Kihlman * : Merge pull request #214 from Yubico/update-fqdn Update scan action with correct image fqdn 2020-04-16 Klas Lindfors * tests/aux/ykval.pl: tests: add a http/1.1 header to the ykval mock it lies a bit more convincingly like this fixes #202 2020-03-23 Klas Lindfors * : commit 66ed4f408d40da43ebb4fa83bd967e59d2e2b4b9 Author: fgierlinger <2966031+fgierlinger@users.noreply.github.com> Date: Sun Mar 22 09:28:39 2020 +0100 2020-01-09 Gabriel Kihlman * .github/workflows/scan.yml: Rerun the scan once a week Might be new scanner versions or scanners added. This will make sure new better (?) scanners will be run on repos that might not have that much activity 2019-12-11 Gabriel Kihlman * : Merge pull request #204 from Yubico/scan Adding a static code analysis github workflow 2019-12-09 Klas Lindfors * : commit 2a98e0ac1bebbae6cdf6a028e61e92f64e60e368 Author: Edmundo Ferreira Date: Thu Dec 5 10:57:11 2019 +0100 2019-10-25 Gabriel Kihlman * drop_privs.c: Typo in debug message: Privilges -> Privileges 2019-09-24 Klas Lindfors * : commit 027f5950d8a6379c17ab3076d7b48b62eae35872 Author: Marc Sensenich Date: Mon Sep 23 17:56:16 2019 -0400 2019-07-01 Klas Lindfors * : commit 4d8d39dea892ce2edfdba2ec273042104fe74e3f Author: Yuping Zuo Date: Fri Jun 28 22:29:11 2019 +0800 2019-06-27 Yuping Zuo * doc/YubiKey_and_SELinux.adoc: Update SELinux doc Added instructions on how to re-enable SELinux 2019-06-27 Yuping Zuo * doc/{YubiKey_and_SELinux_on_Fedora_18_and_up.adoc => YubiKey_and_SELinux.adoc}: Rename and update SELinux doc - Renamed the title to remove Fedora as this applies to Enterprise Linux too. - Added a new section on debugging with sshd. 2019-06-26 Klas Lindfors * pam_yubico.c: use lstat() when checking for existance of user mapping file this treats the existance of a symlink as an intent to configure the mapping and will fail in check_user_token() instead 2019-06-24 Klas Lindfors * pam_yubico.c: check if user file exists before trying to open and return AUTH_NO_TOKENS if file doesn't exist. This fixes issues in the nullok case where this user should just be skipped over, handle other issues with user file as an AUTH_ERROR. fixes #194 2019-06-10 Klas Lindfors * : commit 9d24c966c3175df28340d83342e565f1824fe228 Author: Gabriel Kihlman Date: Wed May 15 12:50:05 2019 +0200 2019-05-15 Gabriel Kihlman * pam_yubico.c: Fix a TOCTOU case when opening the debug_file This also unifies the code between pam-u2f and yubico-pam which means removing the O_CREAT flag here. This is however in line with the README and the behaviour of pam-u2f. Also, the previous code did lstat on the path before and if it did not exist it would not have moved on to the open() anyways. 2019-03-19 Klas Lindfors * : commit 5498bcf53f3104f68aeba8c9c57870bf0ed63ebc Author: Gabriel Kihlman Date: Tue Mar 19 14:49:45 2019 +0100 2019-03-19 Klas Lindfors * : commit 9531bc3c76f1e985ed8604c03591536dac39028a Author: Gabriel Kihlman Date: Tue Mar 19 14:28:18 2019 +0100 2019-02-06 Klas Lindfors * : commit cc14ad4d398b94a5866633e6ed2fdea21c61852a Merge: 456c2a1 5f7d796 Author: Klas Lindfors Date: Wed Feb 6 09:29:43 2019 +0100 2019-02-04 Gabriel Kihlman * ykbzero.h: Add missing header file missing in the last commit 2019-02-04 Gabriel Kihlman * configure.ac, pam_yubico.c: Scrub sensitive data from memory Fixes issue #185 2019-02-04 Gabriel Kihlman * pam_yubico.c: Ensure that the debug log always outputs a valid OTP and not an accidental password Fixes issue #184 2019-01-15 Klas Lindfors * : commit 413037c7e58d89192ee85bf864de0331a27e608c Author: James Magahern Date: Mon Jan 14 11:23:56 2019 -0800 2019-01-09 Klas Lindfors * : commit 1c693f562c7f219b3cc339a190f86f713d8c77d9 Author: Stephen Gelman Date: Tue Jan 8 04:51:13 2019 +0000 2019-01-02 Klas Lindfors * : commit be2fdfdada6d419b4b80de2449e845d323516f72 Author: Tero Paloheimo Date: Tue Jan 1 21:53:24 2019 +0200 2018-11-13 Klas Lindfors * : commit c8c76fbf4c6b25b3ae60b0df4553bd506cdc1f7b Author: Stephen Gelman Date: Mon Nov 12 06:49:28 2018 +0000 2018-11-12 Stephen Gelman * README, pam_yubico.8.txt, pam_yubico.c: Add STARTTLS support for LDAP This allows connecting to LDAP servers that only listen on port 389 but use STARTTLS to get a TLS connection 2018-11-12 Stephen Gelman * README, pam_yubico.8.txt, pam_yubico.c: Add ldap_bind_as_user support This allows using the authenticating user's username and password to bind to the LDAP server. This is desirable because it allows for looking up the yubikey attributes without needing to create a service account. 2018-10-29 Klas Lindfors * : commit 2af4dafb5562368be707b816818777a3bc9afbba Author: Tero Paloheimo Date: Sat Oct 27 13:53:10 2018 +0300 2018-10-24 Klas Lindfors * : commit 9341f3477ad24cded99ada8dd48b6010293fa112 Author: Tero Paloheimo Date: Wed Oct 24 16:23:47 2018 +0300 2018-09-13 Klas Lindfors * : commit bef666a8991b39bbe1c8cde2fda8a9897116ee11 Author: Björn Wiedenmann Date: Wed Aug 15 19:51:01 2018 +0200 2018-05-23 Klas Lindfors * : commit 741928750646c0c82df5acc225744aab974548fd Merge: b240534 eb17d84 Author: Klas Lindfors Date: Wed May 23 10:56:21 2018 +0200 2018-05-22 Karol Babioch * pam_yubico.c, util.c, ykpamcfg.c: Close file descriptors in case fdopen() fails This makes sure that file descriptors will be closed, even if the fdopen() call failes, which was overlooked in some cases beforehand. Should be not an issue in the real world, but let's be as clean as possible. 2018-05-22 Karol Babioch * drop_privs.c: Fix minor typo 2018-05-18 Klas Lindfors * : commit a68d3be1bc187fc3aed0f5014e3849e66f691ac6 Author: Karol Babioch Date: Fri May 18 12:22:07 2018 +0200 2018-05-18 Klas Lindfors * : commit b72fa7611317f22f20051830fbed856d7af2d893 Merge: 3339cd2 b9aaee9 Author: Klas Lindfors Date: Fri May 18 11:47:18 2018 +0200 2018-05-17 Karol Babioch * pam_yubico.c: pam_yubico.c: Check for return codes of snprintf() 2018-05-17 Karol Babioch * util.c: util.c: Check for return codes of snprintf() 2018-05-17 Karol Babioch * ykpamcfg.c: ykpamcfg.c: Check also for negative return code of snprintf() 2018-05-17 Karol Babioch * pam_yubico.c: pam_yubico.c: Use snprintf() instead of sprintf() 2018-05-17 Karol Babioch * util.c: util.c: Check whether generate_random() was invoked successfully This evaluates the return code from generate_random() within write_chalresp_state() and returns immediately in case of an error. This fixes #161. 2018-05-16 Klas Lindfors * README: add note about physical security. 2018-05-07 Klas Lindfors * : commit c32ddd9665e9fe7d21cfe3195c9d58d9aaf784fd Author: Karol Babioch Date: Fri May 4 17:01:38 2018 +0200 2018-05-04 Karol Babioch * ykpamcfg.c: Use strncpy() instead of strcpy() Not an issue, just the former is considered good practice. 2018-05-04 Karol Babioch * ykpamcfg.c: ykpamcfg: Use snprintf() instead of strncpy() strncpy() is _NOT_ a safe version of strcpy() and it should not be used (ineffective and dangerous since a NUL termination might be missing). Instead snprintf() the way to safely construct a string with a given limit. This commit implements this for the action parsing in ykpamcfg. 2018-05-04 Karol Babioch * ykpamcfg.c: Check whether fullpath can be constructed correctly This checks the return code of snprintf() and makes sure that fullpath actually fits into a buffer of size PATH_MAX. Otherwise, it will output an error and exit. 2018-05-04 Karol Babioch * ykpamcfg.c: Make use of PATH_MAX for fullpath Instead of hardcoding the buffer size to 256, using PATH_MAX makes more sense here, since this can be defined differently on different platforms. This is not perfect, though, refer to [1] for some details. In our case it should be good enough. [1]: https://eklitzke.org/path-max-is-tricky 2018-05-04 Karol Babioch * NEWS, README, build-aux/config.rpath, doc/Authentication_Using_Challenge-Response.adoc, doc/Two_Factor_PAM_Configuration.adoc, doc/Ubuntu_FreeRadius_YubiKey.adoc, doc/YubiKey_and_Radius_via_PAM.adoc, doc/YubiKey_and_SSH_via_PAM.adoc, m4/lib-ld.m4, m4/manywarnings.m4, m4/warnings.m4, pam_yubico.8.txt, pam_yubico.c: Remove double space after periods 2018-05-03 Klas Lindfors * : commit 320f487265a338c2acb34877d7506b37665eae5d Author: Karol Babioch Date: Thu May 3 10:59:44 2018 +0200 2018-05-03 Klas Lindfors * : commit 0089f810c712c5ef418a1e444ca47a972fd168e4 Merge: 95c6d85 41e6554 Author: Klas Lindfors Date: Thu May 3 09:45:34 2018 +0200 2018-05-02 Karol Babioch * README: README: Add Travis build status This adds a Travis build status badge to the README file, so the current status can be seen on the GitHub page instantly. 2018-05-02 Klas Lindfors * tests/aux/build-and-test.sh: travis: add check-doc-dist to test script 2018-05-02 Karol Babioch * doc/Authentication_Using_Challenge-Response.adoc, doc/Two_Factor_PAM_Configuration.adoc, util.c: Spell system-wide consistently throughout the project 2018-05-02 Klas Lindfors * : commit 3ecd8ce2675a9aac93be7f0833a25cd8e4eb9a3e Author: Karol Babioch Date: Wed May 2 14:25:10 2018 +0200 2018-05-02 Karol Babioch * ykpamcfg.1.txt: Revise ykpamcfg.1.txt man page 2018-05-02 Klas Lindfors * : commit 0c616bc0654c0c40b7886ba5c1dc2dfb682fcbe1 Merge: 41ff09c 35407b5 Author: Klas Lindfors Date: Wed May 2 14:04:27 2018 +0200 2018-05-02 Karol Babioch * README: README: Add missing descriptions for undocumented options 2018-05-02 Karol Babioch * README, pam_yubico.8.txt: Add documentation for cainfo option This adds documentation about the cainfo parameter to both the README as well as the man page. 2018-05-02 Klas Lindfors * : commit 44e315cdd87467befa7e044ffa5e101165bce27f Author: Karol Babioch Date: Wed May 2 13:35:21 2018 +0200 2018-04-26 Klas Lindfors * : commit bb3e2030eb1de0b4b2fe971b5eb050e58690a952 Author: Karol Babioch Date: Wed Apr 25 15:02:23 2018 +0200 2018-04-24 Klas Lindfors * util.c: debug: drop extra \n at end of debug output 2018-04-24 Klas Lindfors * pam_yubico.c: debug: add ykpers library version to debug output where applicable 2018-04-20 Klas Lindfors * NEWS, configure.ac: bump versions after release 2018-04-20 Klas Lindfors * NEWS: NEWS for 2.26 2018-04-18 Klas Lindfors * README: Drop the blurb about rewriting of this project 2018-04-13 Klas Lindfors * : commit e5bd2ef8449799d06f6f8dad3e602cc047e3c1af Author: Karol Babioch Date: Wed Apr 11 13:37:17 2018 +0200 2018-04-05 Karol Babioch * pam_yubico.c: Use mkotemp() instead of mkstemp() This uses mkostemp() instead of mkstemp(), passing along the `O_CLOEXEC` flag, which makes sure that the file descriptor is closed and won't be leaked into any child process, which was previously an issue due to a missing fclose() (#136). 2018-04-05 Karol Babioch * pam_yubico.c, util.c, ykpamcfg.c: Add "e" flag to fopen() calls This adds the `e` flag to fopen() calls, making sure the `O_CLOEXEC` flag is used. This makes sure that the file descriptor is being closed and not leaked into child processes. This was an issues previously due to a missing fclose() (#136). 2018-04-05 Karol Babioch * pam_yubico.c, util.c: Open file descriptors with O_CLOEXEC This opens any file descriptors with the O_CLOEXEC flag, which will make sure that file descriptors won't be leaked into any child process. This was previously an issue due to a forgotten fclose() (#136). 2018-04-10 Klas Lindfors * : commit c845c63aecb31f10859ac177f2848c74abcaef73 Merge: 6fe39d6 1aacb11 Author: Klas Lindfors Date: Tue Apr 10 10:29:51 2018 +0200 2018-04-09 Karol Babioch * tests/pam_test.c: tests: Fix compiler warnings due to wrong pointer casts This fixes a couple of compiler warnings due to wrong pointer casts in regards to the pamh structure, which is a bit of a hackery way to access the test data. 2018-04-09 Karol Babioch * pam_yubico.c, util.c: Fix several format string specifiers This fixes several specifiers to better represent the data type, which fixes multiple compiler warnings. 2018-04-09 Klas Lindfors * : commit d63c2f2890f65ccbc3ee7b213f7a0ea60a632708 Merge: 0f6ceab 8c740c1 Author: Klas Lindfors Date: Mon Apr 9 09:08:34 2018 +0200 2018-04-06 Karol Babioch * tests/util_test.c: util_test: Use mkdtemp() instead of tempnam() The latter function is considered insecure and deprecated on some platforms. This will create the directory with 0700 implicitely, where it was 0755 beforehand. Since this is a more secure default and the test suite runs fine, we don't bother to chmod the directory. 2018-04-06 Karol Babioch * .travis.yml: Require sudo in .travis.yml Since the install script currently requires sudo, we should state so explicetely in the .travis.yml file to make sure we get a sudo-enabled environment and not a container-based one, as there is no sudo available in the latter one. The default was changed in August 2017, so when forking this repository, the Travis CI won't work out-of-the box without this modification. This is described in some details here [1]. [1]: https://docs.travis-ci.com/user/reference/overview/ 2018-04-03 Klas Lindfors * util.c: util: make sure to close the authfile before returning success fixes #136 2018-03-27 Klas Lindfors * mac.mk: bump ykpers version for mac build 2018-03-27 Klas Lindfors * NEWS, configure.ac: bump version to 2.26 2018-03-27 Klas Lindfors * NEWS: NEWS for 2.25 2018-03-20 Klas Lindfors * : commit 8db623de5dfe81c4b62379fcf91e7908342afa10 Author: Karol Babioch Date: Tue Mar 20 13:55:21 2018 +0100 2018-03-20 Karol Babioch * pam_yubico.c: Print out nullok parameter in debug mode This prints out the nullok parameter in debug mode, which was introduced previously. 2017-12-15 Klas Lindfors * : commit 504c838b5af4ff1341eb27217ea9358eac986dd0 Author: Robert Giles Date: Thu Dec 14 11:51:20 2017 -0600 2017-12-14 Robert Giles * README: Typo in asciidoc syntax. 2017-12-14 Robert Giles * README: Clarify documentation; this example configuration is also useful for just regular pam_yubico configuration elsewhere against AD, too. 2017-11-20 Klas Lindfors * : commit 5003f3974d2b57985cd453e0f8547ac495a6305d Author: Andy Neff Date: Wed Nov 15 15:46:46 2017 -0500 2017-10-10 Klas Lindfors * doc/YubiKey_and_OpenVPN_via_PAM.adoc: drop more text with unnecessary old version deps 2017-10-06 Klas Lindfors * doc/YubiKey_and_OpenVPN_via_PAM.adoc: drop outdated version recommendations 2017-08-30 Klas Lindfors * pam_yubico.c: improved debug messages when getpwnam_r() doesn't return a user 2017-08-07 Klas Lindfors * README, pam_yubico.8.txt: doc: fixup which proxy schemes are supported, add http and https fixes #127 2017-06-26 Klas Lindfors * : commit 42e8a06bfe1b53df9f11118222d7f36c55cf7d58 Author: Larhard Date: Sat Jun 24 08:30:40 2017 +0000 2017-06-23 Larhard * util.c: clear check_user_challenge_file 2017-06-16 Alessio Di Mauro * README: Add message about project rewrite to README 2017-04-09 Larhard * util.c: code cleanup 2017-04-08 Larhard * pam_yubico.c, util.c, util.h: add nullok support to challenge-response mode 2017-03-06 Klas Lindfors * tests/pam_test.c: add tests for use_first_pass 2017-03-06 Klas Lindfors * : commit d048a4a6e2fbe55982c5fc819ab2016b89ca136b Author: Mickaël Thomas Date: Sun Feb 26 20:38:33 2017 +0100 2017-02-26 Mickaël Thomas * pam_yubico.c: Compare OTP IDs against `yubi_attr` only Currently we trust the LDAP server to only return the `yubi_attr` attribute, yet we loop over all possible attributes when there should only be one. Since the bundled test LDAP server ignores the requested attributes list, we must make sure to only match against the `yubi_attr` attibute as opposed to "all of them". This also fixes an issue where AUTH_NOT_FOUND was returned instead of AUTH_NO_TOKENS when there were no values returned for `yubi_attr` but another attribute's value was considered as a candidate token. 2017-02-26 Mickaël Thomas * README, pam_yubico.c, tests/util_test.c, util.c, util.h: Return early if the user has no authorized tokens Currently, if a user has no associated tokens, we still prompt for an OTP challenge and attempt to verify it. This adds a check earlier to avoid the useless prompt in that case. The `nullok` option is also added. It changes the return value from PAM_USER_UNKNOWN to PAM_IGNORE. (fixes #97) Finally, some constants have been turned to symbolic form for clarity and debugging output is improved. 2017-02-26 Mickaël Thomas * pam_yubico.c: Perform OTP validation only if token is authorized When using `try_first_pass` or `use_first_pass`, the password we inherit from PAM might not actually be an OTP challenge. Currently, we happily leak it to the validation server without first checking if it matches an authorized token ID. This postpones sending the actual request until we know the token ID is authorized. 2017-02-23 Klas Lindfors * : commit 0d61b263ca3ce5a912fbf4895830b93b64c52fb7 Author: Thomas Patzke Date: Thu Feb 23 09:01:27 2017 +0100 2017-01-03 Klas Lindfors * ykpamcfg.1.txt: doc: fix typo 2016-11-25 Klas Lindfors * tests/aux/build-and-test.sh: more stuff to make a2x work properly on mac for tests 2016-11-25 Klas Lindfors * tests/aux/build-and-test.sh: install docbook-xsl on mac for tests will hopefully make the tests run smoother 2016-11-25 Klas Lindfors * NEWS, configure.ac: bump versions 2016-11-25 Klas Lindfors * NEWS: NEWS for 2.24 2016-09-08 Klas Lindfors * README, configure.ac: drop reference to dead google groups fixes #106 2016-08-09 Simon Josefsson * pam_yubico.c: Fix typo. 2016-06-22 Klas Lindfors * README, pam_yubico.8.txt, pam_yubico.c: let debug_accept stdout. also check that file exists and is regular 2016-06-16 Klas Lindfors * : commit ebe6633425cf637758a71e330ead60dc5175f767 Merge: 914fa62 3debbfa Author: Klas Lindfors Date: Thu Jun 16 13:16:15 2016 +0200 2016-06-16 Klas Lindfors * README, pam_yubico.8.txt: documentation for debug_file option 2016-06-16 Klas Lindfors * pam_yubico.c: print debug_file when printing configuration 2016-06-16 Klas Lindfors * pam_yubico.c: open debug file with "a" not "a+" 2016-06-16 Klas Lindfors * : Merge pull request #101 from Yubico/user_unknown-fixes User unknown fixes 2016-06-16 Klas Lindfors * pam_yubico.c: cleanup debug_file after we're done 2016-06-16 Klas Lindfors * drop_privs.c, drop_privs.h: fixup openpam drop_privs implementation to support debug_file 2016-06-16 Klas Lindfors * Makefile.am, pam_yubico.c, tests/util_test.c, util.c, util.h, ykpamcfg.c: refactor the debug mode add a debug_file option for where to write debug info (default to stdout) stop compiling with DEBUG_PAM and PAM_DEBUG make debugging behave the same way on linux-pam and openpam 2016-06-15 Klas Lindfors * NEWS, configure.ac: bump versions 2016-06-15 Klas Lindfors * NEWS: NEWS for 2.23 2016-06-13 Klas Lindfors * pam_yubico.c, tests/pam_test.c: add tests for empty OTP validation also fix around so ldap case checks with length of the authorized token, not the length of the passed in id. 2016-06-13 Klas Lindfors * tests/util_test.c: add tests for empty otp part to check_user_token() 2016-06-13 Klas Lindfors * pam_yubico.c: drop check for OTP length, should trigger error later anyways. relates #97 2016-06-13 Klas Lindfors * pam_yubico.c: only process results of OTP check after user is found relates #97 2016-06-13 Klas Lindfors * tests/aux/build-and-test.sh: install docbook-xsl instead of docbook-xml for travis seems to help with a2x hangs 2016-06-03 Klas Lindfors * ykpamcfg.c: use umask instead of chmod to set file permissions 2016-05-23 Klas Lindfors * NEWS, configure.ac: bump versions 2016-05-23 Klas Lindfors * NEWS: NEWS for 2.22 2016-04-18 Klas Lindfors * configure.ac: let configure script check for ykclient_set_proxy() since it's the last symbol added to ykclient that we need, from 2.15. 2016-04-01 Klas Lindfors * : commit 0a1051f6dfd8c13d47614eaf9f38f4ee70bb109a Author: Klas Lindfors Date: Thu Mar 31 10:12:18 2016 +0200 2016-03-31 Klas Lindfors * ykpamcfg.c: set file permissions when creating a new challenge file 2016-03-31 Klas Lindfors * configure.ac, pam_yubico.c: switch pam_modutils_getpwnam()/getpwnam() to always use getpwnam_r() 2016-03-30 Klas Lindfors * pam_yubico.c: copy ownership and modes of old challenge file when creating a new one fixes #92 2016-03-29 Klas Lindfors * README, pam_yubico.8.txt: verbose_otp can not be used with OpenSSH fixes #25 2016-02-26 Klas Lindfors * doc/Authentication_Using_Challenge-Response.adoc: typo. 2016-02-26 Klas Lindfors * doc/Authentication_Using_Challenge-Response.adoc: document how to use ykpamcfg with path instead of moving file 2016-02-26 Klas Lindfors * : Merge pull request #89 from AmShaegar13/improve_cr_auth_docu Changed /etc/yubico to /var/yubico 2016-02-19 Klas Lindfors * .gitignore: ignore pkg files 2016-02-19 Klas Lindfors * NEWS, configure.ac: bump versions after release 2016-02-19 Klas Lindfors * NEWS: NEWS for 2.21 2016-02-17 Klas Lindfors * mac.mk: add first stab at makefile for mac installer fixes #76 2016-02-17 Klas Lindfors * pam_yubico.c, util.c: pass cfg->debug to check_firmware_version() and let it use D macro 2016-02-16 Klas Lindfors * : Merge pull request #88 from shankerwangmiao/bug-fix-for-null-conv add check for NULL conv 2015-11-16 Klas Lindfors * : commit e231b8217cdfc25bffc7181a1270dfd840a3aebf Author: mikemn Date: Thu Nov 12 15:02:49 2015 -0600 2015-11-11 mikemn * pam_yubico.8.txt, pam_yubico.c: Add proxy support via Curl 2015-11-13 Klas Lindfors * tests/aux/build-and-test.sh: set -e later for travis and hope for the best 2015-11-13 Klas Lindfors * tests/aux/build-and-test.sh: add brew update for travis 2015-10-08 Klas Lindfors * configure.ac, m4/valgrind-tests.m4: with more thought: remove valgrind for tests since curl+gnutls seems to leave gnutls inited data around 2015-10-08 Klas Lindfors * configure.ac, m4/valgrind-tests.m4: add valgrind-tests 2015-10-08 Klas Lindfors * pam_yubico.c: use correct modifier for size_t print 2015-10-08 Klas Lindfors * .travis.yml, tests/aux/build-and-test.sh, tests/pam_test.c: setup travis to do multi-os builds 2015-10-08 Klas Lindfors * tests/Makefile.am, tests/test.c: drop the non-portable test test it linked with the module and didn't really do anything, making the test suite more fragile than necessary 2015-10-05 Klas Lindfors * README, doc/YubiKey_and_FreeRADIUS_1FA_via_PAM.adoc, doc/YubiKey_and_FreeRADIUS_via_PAM.adoc: remove forgotten references to wiki There is no wiki for this project, that information is either in the doc folder or in the project manpages. Both of which accessible from https://developers.yubico.com/yubico-pam/ fixes #81 2015-09-22 Klas Lindfors * NEWS, configure.ac: bump versions 2015-09-22 Klas Lindfors * NEWS: NEWS for 2.20 2015-09-15 Klas Lindfors * pam_yubico.8.txt: add information about files used thanks to @madrat- for original suggestions fixes #78 2015-09-14 Klas Lindfors * pam_yubico.c: reset yk_errno when we're happy with the result 2015-09-14 Klas Lindfors * pam_yubico.c: correct fchmod() return check 2015-09-14 Klas Lindfors * pam_yubico.c: switch i to size_t to match usage 2015-09-14 Klas Lindfors * pam_yubico.c: fix initialization of msg to not warn apparently this is gcc bug 53119 2015-09-14 Klas Lindfors * pam_yubico.c: make yubi_attr_prefix_len a size_t 2015-09-14 Klas Lindfors * pam_yubico.c: mark unused parameter with __attribute__((unused)) 2015-09-14 Klas Lindfors * pam_yubico.c: use mkstemp() to get the tempfile instead unfortunately means we have to fchmod() it afterwards to be sure 2015-09-14 Klas Lindfors * : Merge pull request #79 from madrat-/master do_challenge_response change privileges twice at reading and writing 2015-09-11 Klas Lindfors * pam_yubico.c: in the challenge-response case only drop privileges for user dir This allows the module to work in a case where the directory is only writable to root. fixes #77 2015-09-11 Klas Lindfors * configure.ac: don't warn about to long strings 2015-09-09 Klas Lindfors * pam_yubico.c, util.c, util.h, ykpamcfg.c: include pwd.h in util.h 2015-09-08 Klas Lindfors * Makefile.am: disable xmllint for a2x since it seems to cause problems 2015-09-08 Klas Lindfors * configure.ac, pam_yubico.c, tests/util_test.c, util.c, util.h, ykpamcfg.c: use pam_modutil_getpwnam() if it's available also refactor to pass in a passwd struct to the util functions 2015-08-18 Klas Lindfors * tests/util_test.c: add a test for a user showing up twice in the file 2015-08-11 Klas Lindfors * pam_yubico.8.txt: add documentation for chalresp_path parameter 2015-08-11 Klas Lindfors * : Merge pull request #71 from afeinberg/comments Support comments in authfile 2015-07-08 Klas Lindfors * pam_yubico.c: free message at end of function it was possible message was never freed if the sprintf() call failed 2015-06-15 Klas Lindfors * pam_yubico.c: add cainfo option to allow usage of a cabundle instead of path path submitted by github user @Mrten reportedly this is needed if curl is linked with gnutls fixes #6 2015-04-27 Klas Lindfors * pam_yubico.c: add debug print for last url used 2015-04-07 Klas Lindfors * tests/Makefile.am: export LDAPNOINIT=1 for tests so we don't run with systems ldap config fixes #61 2015-04-07 Klas Lindfors * tests/aux/ldap.pl, tests/aux/ykval.pl: more debugging on mocks 2015-04-07 Klas Lindfors * tests/aux/ldap.pl, tests/aux/ykval.pl: add some debug logging to ldap and ykval mocks 2015-03-30 Klas Lindfors * util.c: change int to size_t 2015-03-30 Klas Lindfors * util.c: fixup warnings with sign 2015-03-30 Klas Lindfors * util.c: fixup warnings related to constness of filename 2015-03-30 Klas Lindfors * : Merge pull request #60 from neverpanic/master Fix warnings on OS X with clang 2015-03-28 Clemens Lang * pam_yubico.c: Fix warning if pam_message.msg isn't constant On OS X and FreeBSD, struct pam_message does not declare its msg member as constant. This causes a warning when assigning a constant string to it: pam_yubico.c:403:14: warning: assigning to 'char *' from 'const char *' discards qualifiers [-Wincompatible-pointer-types-discards-qualifiers] msg[0].msg = message; ^ ~~~~~~~ 2015-03-23 Klas Lindfors * Makefile.am: drop save-mans 2015-03-23 Klas Lindfors * NEWS, configure.ac: bump versions 2015-03-23 Klas Lindfors * NEWS: release 2.19 2015-03-17 Klas Lindfors * README: fix typo 2015-03-13 Klas Lindfors * README: fix the git url again fixes #54 2015-03-10 Henrik Stråth * doc/YubiKey_and_OpenVPN_via_PAM.adoc: Fixed broken link 2015-03-10 Henrik Stråth * doc/YubiKey_and_OpenVPN_via_PAM.adoc: removed broken link 2015-03-10 Klas Lindfors * : Merge pull request #56 from shanx/master Clarified the notion of id when using the pam_yubico module 2015-03-06 Remco Wendt * README: fixed typo 2015-03-06 Remco Wendt * README: Clarified the notion of id when using the pam_yubico module 2015-03-04 Klas Lindfors * NEWS: fix formatting of NEWS 2015-03-04 Klas Lindfors * NEWS: prepare news for 2.19 2015-03-04 Klas Lindfors * pam_yubico.c: change datatypes to unsigned avoiding warnings about sign conversion 2015-03-04 Klas Lindfors * : commit 77067004e830724442004c458c0d8f59e18f7272 Author: Klas Lindfors Date: Wed Mar 4 13:52:31 2015 +0100 2015-03-04 Klas Lindfors * README: use ldap_bind_user and ldap_bind_password in example 2015-03-04 Klas Lindfors * tests/aux/ldap.pl, tests/pam_test.c: simple ldap filter test 2015-03-04 Klas Lindfors * pam_yubico.c: allow ldap search with no base 2015-03-04 Klas Lindfors * tests/util_test.c, util.c: make sure filter is null terminated and return length including null 2015-03-04 Klas Lindfors * tests/pam_test.c: drop authfile for ldap_cfg 2015-03-04 Klas Lindfors * pam_yubico.c: move debug print (and dereference of resp) inside null check 2015-03-04 Klas Lindfors * Makefile.am: add DEFS to cppcheck 2015-03-04 Klas Lindfors * .travis.yml: try to survive and continue for failure in apt-get update 2015-03-04 Klas Lindfors * pam_yubico.c: move protocol inside HAVE_LIBLDAP to avoid warning of unused variable 2015-03-04 Klas Lindfors * util.c: no need for a temp pointer when writing output of filter_result_len() 2015-03-04 Klas Lindfors * pam_yubico.c: drop password parameter for authorized_user_token_ldap() 2015-03-04 Klas Lindfors * pam_yubico.c: drop the ldap_bind_no_anonymous feature Sending the users password out in another direction is scary and requires more thought. Ideally this should be solved by using ldap GSSAPI or similar instead of sending a cleartext password over the network. 2015-03-04 Klas Lindfors * pam_yubico.c: consider all success as valid session 2015-03-04 Klas Lindfors * pam_yubico.c: don't throw const away in cast 2015-03-04 Klas Lindfors * pam_yubico.c: client_id is supposed to be unsigned 2015-03-04 Klas Lindfors * pam_yubico.c: make sure rc is initialized before using 2015-03-04 Klas Lindfors * pam_yubico.c: don't use c++ style comments 2015-03-04 Klas Lindfors * pam_yubico.c: don't use c++ style comments 2015-03-04 Klas Lindfors * pam_yubico.c: conform to other code 2015-02-20 Klas Lindfors * README: reference github with https, not git@ fixes #54 2015-02-16 Klas Lindfors * util.c, util.h: simplify filter_result_len() and fixup warnings 2015-02-16 Klas Lindfors * pam_yubico.c: drop extra options for bind dn and password 2015-02-16 Klas Lindfors * : Merge commit 'aa87979eb84adb3adef170dac6ff2285ba43cd26' into features/ldap Conflicts: README 2015-02-16 Klas Lindfors * .gitignore: ignore 2015-02-13 Klas Lindfors * pam_yubico.c: add debug print with version 2015-02-12 Klas Lindfors * NEWS, configure.ac: bump versions after release 2015-02-12 Klas Lindfors * NEWS: NEWS for 2.18 2015-02-12 Klas Lindfors * tests/Makefile.am, tests/pam_test.c: make sure out-of-tree builds work 2015-02-12 Klas Lindfors * ykpamcfg.1.txt, ykpamcfg.c: add -V for version to ykpamcfg and exit earlier also error on any part of iterations being non-numeric 2015-01-29 Klas Lindfors * util.c: fix format specifiers 2015-01-29 Klas Lindfors * Makefile.am, configure.ac: add --enable-cppcheck 2015-01-21 Klas Lindfors * configure.ac: fixup check for pam_modutil_drop_priv() this was broken in 68d3f5879ec6782742d68d7e74066da739a0b444 fixes #50 2015-01-21 Klas Lindfors * pam_yubico.c: free more unfreed memory in the pam_response structure 2015-01-21 Klas Lindfors * tests/pam_test.c: strdup() the OTP returned 2015-01-20 Klas Lindfors * tests/aux/build-and-test.sh: update build-and-test 2015-01-20 Klas Lindfors * .travis.yml, tests/aux/build-and-test.sh: enable coverage build for travis 2015-01-20 Klas Lindfors * .gitignore, Makefile.am, configure.ac, tests/Makefile.am: add a --enable-coverage switch 2015-01-20 Klas Lindfors * tests/pam_test.c: only run the ldap "server" if we're compiling with ldap 2015-01-20 Klas Lindfors * README: add notice about tests requiring perl and Net::LDAP::Server 2015-01-20 Klas Lindfors * tests/aux/authfile, tests/pam_test.c: add a test for authfile user with two ok public ids 2015-01-20 Klas Lindfors * tests/aux/ldap.pl, tests/aux/ykval.pl, tests/pam_test.c: add a second successful ldap test with two valid yubiKeyId 2015-01-20 Klas Lindfors * tests/pam_test.c: use higher ports and put them in constants 2015-01-19 Klas Lindfors * .travis.yml: add more travis config 2015-01-19 Klas Lindfors * tests/pam_test.c: fixup some warnings in test 2015-01-19 Klas Lindfors * Makefile.am: add EXTRA_DIST for tests/aux 2015-01-19 Klas Lindfors * tests/aux/ldap.pl, tests/pam_test.c: add a mocked ldap server and ldap tests relates #44 2015-01-19 Klas Lindfors * tests/aux/ykval.pl, tests/pam_test.c: add a test for wrong otp and small fixup to mock server 2015-01-19 Klas Lindfors * tests/pam_test.c: drop id from data struct and use index in array 2015-01-19 Klas Lindfors * tests/aux/ykval.pl, tests/pam_test.c: pass port correctly 2015-01-19 Klas Lindfors * tests/aux/ykval.pl, tests/pam_test.c: add test for wrong otp for user 2015-01-19 Klas Lindfors * tests/pam_test.c: add test for failure-case 2015-01-19 Klas Lindfors * tests/pam_test.c: add a second child and mock server 2015-01-19 Klas Lindfors * tests/pam_test.c: fix some warnings 2015-01-19 Klas Lindfors * tests/pam_test.c: restructure the test some 2015-01-19 Klas Lindfors * tests/pam_test.c: make the recent pam_test more modularised and generic 2015-01-19 Klas Lindfors * tests/pam_test.c: calculate size of cfg array 2015-01-16 Klas Lindfors * tests/aux/ykval.pl, tests/aux/ykval.sh, tests/pam_test.c: test a bit more and switch the mock to perl 2015-01-16 Klas Lindfors * tests/aux/authfile, tests/aux/ykval.sh, tests/pam_test.c: test an OK authentication add a simple http server in bash that validates the OTP 2015-01-16 Klas Lindfors * .gitignore: ignore more 2015-01-16 Klas Lindfors * tests/Makefile.am, tests/pam_test.c: add first step of tests calling the actual module 2015-01-16 Klas Lindfors * Makefile.am, configure.ac: prepare by building a temporary library for the module also fix the linking of libpam so we only do that when we want/need it 2015-01-16 Klas Lindfors * pam_yubico.c: fixup a memory leak the caller is responsible for freeing the pam_response from conversations 2014-12-17 Klas Lindfors * Makefile.am: fixup doc inclusion 2014-12-10 Simon Josefsson * Makefile.am: Fix. 2014-12-01 Henrik Stråth * README: Update README 2014-11-27 Klas Lindfors * util.c: change strtok usage to strtok_r 2014-11-20 Meno Abels * README, pam_yubico.c: integrate https://github.com/Yubico/yubico-pam/pull/39/files 2014-10-29 Meno Abels * README, pam_yubico.c, util.c, util.h: enable that openvpn can now run without any local user 2014-10-28 Meno Abels * pam_yubico.c, tests/util_test.c, util.c, util.h: added a better ldap handling, and to allow query active directory 2014-10-31 Henrik Stråth * README: Update README 2014-10-31 Henrik Stråth * doc/Authentication_Using_Challenge-Response.adoc: Update Authentication_Using_Challenge-Response.adoc 2014-10-31 Henrik Stråth * doc/Two_Factor_PAM_Configuration.adoc: Update Two_Factor_PAM_Configuration.adoc 2014-10-31 Henrik Stråth * doc/Two_Factor_PAM_Configuration.adoc: Update Two_Factor_PAM_Configuration.adoc 2014-10-31 Henrik Stråth * doc/Two_Factor_PAM_Configuration.adoc: Update Two_Factor_PAM_Configuration.adoc 2014-10-31 Henrik Stråth * doc/{Yubikey_and_SELinux_on_Fedora_18_and_up.txt => Yubikey_and_SELinux_on_Fedora_18_and_up.adoc}: Update and rename Yubikey_and_SELinux_on_Fedora_18_and_up.txt to Yubikey_and_SELinux_on_Fedora_18_and_up.adoc 2014-10-31 Henrik Stråth * doc/YubiKey_and_FreeRADIUS_via_PAM.adoc: Update YubiKey_and_FreeRADIUS_via_PAM.adoc 2014-10-31 Henrik Stråth * doc/YubiKey_and_FreeRADIUS_via_PAM.adoc: Update YubiKey_and_FreeRADIUS_via_PAM.adoc 2014-10-31 Henrik Stråth * doc/MacOS_X_Challenge-Response.adoc: Update MacOS_X_Challenge-Response.adoc 2014-10-31 Henrik Stråth * doc/MacOS_X_Challenge-Response.adoc: Update MacOS_X_Challenge-Response.adoc 2014-10-31 Henrik Stråth * doc/MacOS_X_Challenge-Response.adoc: Update MacOS_X_Challenge-Response.adoc 2014-10-31 Henrik Stråth * doc/MacOS_X_Challenge-Response.adoc: Update MacOS_X_Challenge-Response.adoc 2014-10-31 Henrik Stråth * doc/MacOS_X_Challenge-Response.adoc: Update MacOS_X_Challenge-Response.adoc 2014-10-31 Klas Lindfors * ykpamcfg.c: don't write to a constant pointer instead allocate action on the stack and copy the data there 2014-10-30 Henrik Stråth * doc/Yubikey_and_SSH_via_PAM.adoc: Fixed adoc error 2014-10-30 Henrik Stråth * doc/YubiKey_and_OpenVPN_via_PAM.adoc: Update YubiKey_and_OpenVPN_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/YubiKey_and_FreeRADIUS_via_PAM.adoc: Update YubiKey_and_FreeRADIUS_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/YubiKey_and_FreeRADIUS_via_PAM.adoc: Update YubiKey_and_FreeRADIUS_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/{Local_Authentication_Using_Challenge-Response.adoc => Authentication_Using_Challenge-Response.adoc}: Update and rename Local_Authentication_Using_Challenge-Response.adoc to Authentication_Using_Challenge-Response.adoc 2014-10-29 Henrik Stråth * doc/YubiKey_and_OpenVPN_via_PAM.adoc: Update YubiKey_and_OpenVPN_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/YubiKey_and_OpenVPN_via_PAM.adoc: Update YubiKey_and_OpenVPN_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/YubiKey_and_OpenVPN_via_PAM.adoc: Update YubiKey_and_OpenVPN_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/YubiKey_and_OpenVPN_via_PAM.adoc: Update YubiKey_and_OpenVPN_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/YubiKey_and_OpenVPN_via_PAM.adoc: Update YubiKey_and_OpenVPN_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/Yubikey_and_SSH_via_PAM.adoc: Update Yubikey_and_SSH_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/Yubikey_and_SSH_via_PAM.adoc: Update Yubikey_and_SSH_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/Yubikey_and_SSH_via_PAM.adoc: Update Yubikey_and_SSH_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/Yubikey_and_SSH_via_PAM.adoc: Update Yubikey_and_SSH_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/Yubikey_and_SSH_via_PAM.adoc: Update Yubikey_and_SSH_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/Yubikey_and_SSH_via_PAM.adoc: Update Yubikey_and_SSH_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/{YubikeyAndSSHViaPAM.txt => Yubikey_and_SSH_via_PAM.adoc}: Update and rename YubikeyAndSSHViaPAM.txt to Yubikey_and_SSH_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/{YubikeyAndRadiusViaPAM.txt => Yubikey_and_Radius_via_PAM.adoc}: Update and rename YubikeyAndRadiusViaPAM.txt to Yubikey_and_Radius_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/{Yubikey-and-SELinux-on-Fedora-18-and-up.txt => Yubikey_and_SELinux_on_Fedora_18_and_up.txt}: Rename Yubikey-and-SELinux-on-Fedora-18-and-up.txt to Yubikey_and_SELinux_on_Fedora_18_and_up.txt 2014-10-29 Henrik Stråth * doc/{YubiKeyAndOpenVPNviaPAM.txt => YubiKey_and_OpenVPN_via_PAM.adoc}: Update and rename YubiKeyAndOpenVPNviaPAM.txt to YubiKey_and_OpenVPN_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/{YubiKeyAndFreeRADIUSwithsinglefactorauthenticationviaPAM.txt => YubiKey_and_FreeRADIUS_1FA_via_PAM.adoc}: Rename YubiKeyAndFreeRADIUSwithsinglefactorauthenticationviaPAM.txt to YubiKey_and_FreeRADIUS_1FA_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/{YubiKeyAndFreeRADIUSviaPAM.txt => YubiKey_and_FreeRADIUS_via_PAM.adoc}: Rename YubiKeyAndFreeRADIUSviaPAM.txt to YubiKey_and_FreeRADIUS_via_PAM.adoc 2014-10-29 Henrik Stråth * doc/{UbuntuFreeRadiusYubiKey.txt => Ubuntu_FreeRadius_YubiKey.adoc}: Update and rename UbuntuFreeRadiusYubiKey.txt to Ubuntu_FreeRadius_YubiKey.adoc 2014-10-29 Henrik Stråth * doc/{TwoFactorPAMConfiguration.txt => Two_Factor_PAM_Configuration.adoc}: Rename TwoFactorPAMConfiguration.txt to Two_Factor_PAM_Configuration.adoc 2014-10-29 Henrik Stråth * doc/{MacOS_X_Challenge-Response.txt => MacOS_X_Challenge-Response.adoc}: Rename MacOS_X_Challenge-Response.txt to MacOS_X_Challenge-Response.adoc 2014-10-29 Henrik Stråth * doc/{MacOSXChallengeResponse.txt => MacOS_X_Challenge-Response.txt}: Rename MacOSXChallengeResponse.txt to MacOS_X_Challenge-Response.txt 2014-10-29 Henrik Stråth * doc/{Local_Authentication_Using_Challenge-Response.txt => Local_Authentication_Using_Challenge-Response.adoc}: Rename Local_Authentication_Using_Challenge-Response.txt to Local_Authentication_Using_Challenge-Response.adoc 2014-10-29 Henrik Stråth * doc/{LocalAuthenticationUsingChallengeResponse.txt => Local_Authentication_Using_Challenge-Response.txt}: Rename LocalAuthenticationUsingChallengeResponse.txt to Local_Authentication_Using_Challenge-Response.txt 2014-10-29 Henrik Stråth * README: Update README 2014-10-29 Henrik Stråth * README: Update README 2014-10-29 Henrik Stråth * README: Update README 2014-10-29 Henrik Stråth * README: Update README 2014-10-29 Henrik Stråth * README: Update README 2014-10-29 Henrik Stråth * README: Update README 2014-10-29 Henrik Stråth * README: Update README 2014-10-29 Henrik Stråth * README.adoc: symlinked README 2014-10-24 Henrik Stråth * doc/YubiKeyAndOpenVPNviaPAM.txt: Update YubiKeyAndOpenVPNviaPAM.txt 2014-10-24 Henrik Stråth * doc/UbuntuFreeRadiusYubiKey.txt: Fixed Asciidoc errors 2014-08-27 Klas Lindfors * tests/util_test.c: add test for check_user_token() 2014-08-27 Klas Lindfors * tests/test.c: make argv const to get rid of warning 2014-08-27 Klas Lindfors * pam_yubico.c, util.c, util.h: move check_user_token() to util for testability.. 2014-08-27 Klas Lindfors * tests/util_test.c: use constants 2014-08-27 Klas Lindfors * tests/util_test.c: close the tmpfile when done.. 2014-08-27 Klas Lindfors * tests/util_test.c: remove some warnings from the new test. 2014-08-27 Klas Lindfors * Makefile.am, pam_yubico.c: re-add libyubikey, needed. 2014-08-27 Klas Lindfors * tests/util_test.c: add stdlib.h 2014-08-27 Klas Lindfors * tests/util_test.c: some tests of loading chalresp state 2014-08-27 Klas Lindfors * tests/util_test.c: test other case in get_user_cfgfile_path() 2014-08-27 Klas Lindfors * Makefile.am, tests/util_test.c: basic test for get_user_cfgfile_path() 2014-08-27 Klas Lindfors * .gitignore, tests/Makefile.am, tests/util_test.c: add beginnings of a second test 2014-08-27 Klas Lindfors * pam_yubico.c, util.c, util.h: move includes around in an attempt to include less 2014-08-27 Klas Lindfors * .gitignore, Makefile.am, pam_yubico.c: break out util.c into it's own temporary library to make testing easier 2014-08-27 Klas Lindfors * Makefile.am, configure.ac, tests/Makefile.am, test.c => tests/test.c: move tests to subdir 2014-08-26 Klas Lindfors * NEWS, configure.ac: bump versions after release 2014-08-26 Klas Lindfors * NEWS: NEWS for 2.17 2014-08-26 Klas Lindfors * Makefile.am: add MANSOURCES to EXTRA_DIST on it's own line to not conflict with make release 2014-07-29 Klas Lindfors * pam_yubico.c: correctly mark strings in cfg struct as const 2014-07-29 Klas Lindfors * pam_yubico.c: fixup so urllist data is kept within it's own memory before strtok fixes #41 2014-06-16 Klas Lindfors * pam_yubico.8.txt: add forgotten :: on mode line 2014-06-11 Klas Lindfors * .travis.yml: let travis install fewer packages asciidoc comes with a bunch of recommends, find out what is needed for a2x manpages and install that 2014-06-11 Klas Lindfors * .travis.yml, README: asciidoc is needed to build from git 2014-06-11 Klas Lindfors * .gitignore, Makefile.am, configure.ac, pam_yubico.8, pam_yubico.8.txt, ykpamcfg.1, ykpamcfg.1.txt: convert manpages to asciidoc 2014-06-10 Klas Lindfors * ykpamcfg.1: add a space after roff comment 2014-06-10 Klas Lindfors * .travis.yml: also build with everything enabled 2014-06-10 Klas Lindfors * BLURB: add travis to blurb 2014-06-10 Klas Lindfors * .travis.yml: add -y to add-apt-repository for travis 2014-06-10 Klas Lindfors * .travis.yml: add travis configuration 2014-06-10 Klas Lindfors * NEWS, configure.ac: bump version after release 2014-06-10 Klas Lindfors * NEWS: version 2.16 2014-06-10 Klas Lindfors * .gitignore: ignore test artifacts 2014-06-10 Klas Lindfors * NEWS: add NEWS for 2.16 2014-06-02 Klas Lindfors * : Merge pull request #38 from alexjfisher/master Fix segfault whilst freeing urls 2014-04-30 Klas Lindfors * README: add urllist to README 2014-04-30 Simon Josefsson * NEWS, configure.ac: Bump NEWS. 2014-04-30 Simon Josefsson * AUTHORS: Update. 2014-04-30 Simon Josefsson * COPYING, drop_privs.c, drop_privs.h, pam_yubico.c, test.c, util.c, util.h, ykpamcfg.c: Update copyright years. 2014-04-30 Simon Josefsson * BLURB, doc/YubiKeyAndFreeRADIUSviaPAM.txt, doc/YubiKeyAndFreeRADIUSwithsinglefactorauthenticationviaPAM.txt, doc/YubiKeyAndOpenVPNviaPAM.txt, doc/YubikeyAndSSHViaPAM.txt, pam_yubico.8, ykpamcfg.1: Fix URLs. 2014-04-30 Simon Josefsson * doc/MacOSXChallengeResponse.txt: Redo markup. 2014-04-30 Simon Josefsson * Makefile.am: Allow use of subkeys. 2014-04-30 Simon Josefsson * NEWS: Version 2.15. 2014-04-30 Simon Josefsson * Makefile.am: Fix doc/ EXTRA_DIST rule. 2014-04-30 Simon Josefsson * doc/LocalAuthenticationUsingChallengeResponse.txt, doc/MacOSXChallengeResponse.txt, doc/TwoFactorPAMConfiguration.txt, doc/UbuntuFreeRadiusYubiKey.txt, doc/YubiKeyAndFreeRADIUSviaPAM.txt, doc/YubiKeyAndFreeRADIUSwithsinglefactorauthenticationviaPAM.txt, doc/YubiKeyAndOpenVPNviaPAM.txt, doc/Yubikey-and-SELinux-on-Fedora-18-and-up.txt, doc/YubikeyAndRadiusViaPAM.txt, doc/YubikeyAndSSHViaPAM.txt: Add docs from the wiki. 2014-04-30 Simon Josefsson * doc: Removed submodule doc 2014-04-30 Simon Josefsson * .gitmodules: Drop submodule. 2014-04-30 Simon Josefsson * README, configure.ac: Bump yubico-c-client version required. Fix URLs. 2014-04-30 Simon Josefsson * NEWS: Add. 2014-03-26 Klas Lindfors * pam_yubico.8: man for urllist feature 2014-03-26 Klas Lindfors * pam_yubico.c: fixup strtok of url templates 2014-03-26 Klas Lindfors * pam_yubico.c: fixup urllist feature (hopefully) 2014-03-26 Klas Lindfors * pam_yubico.c: spelling 2014-03-12 Klas Lindfors * pam_yubico.c: add urllist feature allowing up to 10 urls to be specified in config 2013-12-17 Klas Lindfors * : Merge pull request #34 from c0sco/master Add information on FreeBSD ports. 2013-11-26 Klas Lindfors * BLURB: add BLURB 2013-11-26 Klas Lindfors * : Merge pull request #33 from cicku/patch-1 Update README 2013-11-21 Klas Lindfors * util.c: free() filename before throwing the pointer away avoids a memory-leak pointed out by @crosser 2013-11-18 Klas Lindfors * pam_yubico.8: more text about authfile 2013-11-18 Klas Lindfors * pam_yubico.8: break between authfile and id 2013-10-08 Simon Josefsson * pam_yubico.8, ykpamcfg.1: More https. 2013-10-08 Simon Josefsson * README: Use more https. 2013-10-06 Simon Josefsson * README: Use SSH git URL. 2013-10-06 Simon Josefsson * README: Fix ModHex calculator URL and section. Suggested by Linus Nordberg . 2013-10-02 Klas Lindfors * pam_yubico.8: client is default mode 2013-10-02 Klas Lindfors * : Merge pull request #30 from eworm-de/man install man page pam_yubico.8 2013-10-02 Klas Lindfors * pam_yubico.8, ykpamcfg.1: add man page for pam_yubico 2013-09-27 Klas Lindfors * NEWS, configure.ac: bump versions 2013-09-27 Klas Lindfors * NEWS: release 2.14 2013-09-27 Simon Josefsson * : Merge pull request #14 from BinetReseau/master No match between user and token detailed pam values 2013-09-23 Klas Lindfors * configure.ac: require version 1.8.0 of libykpers since we use yk_challenge_response() introduced in that version. 2013-09-20 Klas Lindfors * doc: update doc submodule 2013-09-20 Klas Lindfors * drop_privs.c, drop_privs.h, pam_yubico.c: reimplement drop_privs to implement the pam_modutils interface Original patch from maxime.deroucy@gmail.com. http://code.google.com/p/yubico-pam/issues/detail?id=49 fixes #19 2013-09-19 Klas Lindfors * : Merge pull request #27 from eworm-de/stack use correct size to hex decode salt 2013-09-19 Klas Lindfors * Makefile.am: fixup release target for move to github 2013-09-19 Klas Lindfors * README: minor formatting fixes 2013-09-19 Klas Lindfors * README, ykpamcfg.1: everything moved to github 2013-09-19 Klas Lindfors * COPYING, configure.ac, drop_privs.c, pam_yubico.c, util.c, util.h, ykpamcfg.1, ykpamcfg.c: update copyright years 2013-09-19 Klas Lindfors * drop_privs.c: allocate space for the grplist in the privs structure as we want to save the privs structure longer than the scope of def_privs we need to allocate the space for grplist. 2013-09-19 Klas Lindfors * drop_privs.c: correct debug message 2013-09-18 Klas Lindfors * util.c: move around to avoid warning 2013-09-18 Klas Lindfors * util.c: always set iterations and rewind before second fscanf() 2013-09-18 Klas Lindfors * README, configure.ac: update urls to other projects 2013-09-18 Klas Lindfors * util.c: use malloc() instead of alloca() and free after use 2013-04-20 Eugene Crosser * drop_privs.c, pam_yubico.c, util.c: Stop leaks of memory and of privileges Fix several memory leaks and mishandling of the privilege status where a function returned failure indication, and previously allocated memory was not freed (and the referece was lost), or previously droped privileges where not restored. 2013-09-18 Klas Lindfors * ykpamcfg.1, ykpamcfg.c: add -i switch for setting iterations with ykpamcfg 2013-09-18 Klas Lindfors * .gitignore: ignore signed releases 2013-09-18 Klas Lindfors * drop_privs.c: fix warnings 2013-09-18 Klas Lindfors * pam_yubico.c: fixup warnings 2013-09-18 Klas Lindfors * ykpamcfg.c: fix warnings 2013-09-18 Klas Lindfors * pam_yubico.c, util.c, util.h: use pbkdf2 to process the exepected response this bumps the version on the state file to 2 old files can still be read but new files will use the new format 2013-09-18 Klas Lindfors * pam_yubico.c, util.c, util.h, ykpamcfg.c: refactor to use chalresp function from ykpers so challenge_response() now calls yk_challenge_response() to do the yubikey internal stuff. 2013-09-18 Klas Lindfors * Makefile.am, configure.ac, m4/manywarnings.m4, m4/warnings.m4: add the same warnings package as yubico-c 2013-09-18 Simon Josefsson * NEWS: Add. 2013-09-18 Simon Josefsson * Makefile.am, NEWS: Don't install internal header files. 2013-05-13 Christian Hesse * pam_yubico.c: print information only if debug is specified The pam module is very informative. I do not want it to print any information unless debug is specified. An attacker should not get any information. 2013-03-01 Klas Lindfors * NEWS, configure.ac: bump version after release 2013-03-01 Klas Lindfors * Makefile.am: add more docs 2013-03-01 Klas Lindfors * doc: update doc 2013-03-01 Klas Lindfors * NEWS: release 2.13 2013-02-14 Dain Nilsson * : Merge pull request #15 from wwest4/master util.c version check fix 2013-01-26 Pierre-Alain Dupont * pam_yubico.c: A more precise handling of user-token match errors Signed-off-by: Pierre-Alain Dupont 2013-01-18 Klas Lindfors * configure.ac: bump automake version to 1.11 2013-01-18 Clemens Lang * configure.ac: configure.ac: call AM_PROG_AR if available 2013-01-17 Klas Lindfors * ykpamcfg.1: add path option to man page 2012-11-14 Tommaso Galassi De Orchi * ykpamcfg.c: New feature, create directory in the user home. 2012-11-14 Tommaso Galassi De Orchi * ykpamcfg.c: Added option to specify a path for ykpamcfg. 2012-11-13 Klas Lindfors * README: update ppa location 2012-11-07 Klas Lindfors * README, configure.ac: add AM_PROG_AR workaround for automake 1.12. 2012-11-05 Klas Lindfors * : commit 37e6a6a80f08cbd4793fee4ff82f58410ab2326e Author: Simon Josefsson Date: Wed Oct 31 17:01:18 2012 +0100 2012-10-30 alexandru totolici * README: Distinguish 'characters' from 'digits' in README The Yubikey token ID is 12 characters long, not 12 digits long. This can make it slightly confusing when first setting a key up, and in any case it's incorrect language. 2012-10-10 Karl Goetz * README: Mention google code hosts downloads too Per request on Issue 45 I've reworded this bit so it mentions google code hosting the package downloads. I've had to reflow the text slightly because it pushed it over 72 chars. 2012-10-04 Karl Goetz * README, ykpamcfg.1: Finish both files with a blank line Helps to keep all text readable on broken terminals/screens. 2012-10-04 Karl Goetz * README: Correct wording for PPA Its 'Personal' not 'Private' https://help.launchpad.net/Packaging/PPA 2012-10-04 Karl Goetz * README: Refer to Github as well as G.Code. This attempts to help explain where to look for various things (eg bugs, code, doco). 2012-10-03 Klas Lindfors * README: break line so we keep document width consistent 2012-10-03 Karl Goetz * README: Attempt to clarify format of mapping files I didn't realise from the original version that it was a series of different token IDs - i thought it was different parts of the OTP. Hopefully this change clarifys whats really going on here. Part of the patch/doco for Issue 44. http://code.google.com/p/yubico-pam/issues/detail?id=44 2012-10-03 Karl Goetz * README: Explain how to generate an OTP. This wasn't obvious to me and so I suspect others may be confused too. This commit provides the documentation to close Issue 44, but is NOT identical to the patch provided on that report. http://code.google.com/p/yubico-pam/issues/detail?id=44 2012-10-03 Karl Goetz * README: Explain what an OTP is 2012-10-03 Karl Goetz * README: adding a new line for consistancy with spacing on other headings 2012-10-03 Karl Goetz * README: Add information about SELinux to README Because SELinux in enforcing mode will cause yubikey authentication to fail I'm including some references to discussion around this problem. The RH bugzilla link also includes a policy snippet which can be used for this." This commit should resolve Issue #43. http://code.google.com/p/yubico-pam/issues/detail?id=43 2012-08-06 Vincent Brillault * pam_yubico.c: Verify the otp_length given by the configuration Avoid out of bound writing at ligne -920,1 +927,1: strncpy (otp_id, password + skip_bytes, cfg->token_id_length); 2012-06-15 Klas Lindfors * NEWS, configure.ac: bump versions post-release 2012-06-15 Klas Lindfors * README: copy changes about dependencies from wiki. 2012-06-15 Klas Lindfors * NEWS: NEWS for 2.12 2012-06-15 Klas Lindfors * README, configure.ac: remove -Wno-extra-portability, it breaks on automake before 1.11.2 2012-06-14 Klas Lindfors * pam_yubico.c: use errstr to communicate with the user 2012-06-14 Klas Lindfors * NEWS, configure.ac: bump versions as 2.11 is released 2012-06-08 Klas Lindfors * pam_yubico.c: check for same response in pam module, output debug for the user 2012-06-08 Klas Lindfors * ykpamcfg.c: add check that two challenges get different responses 2012-06-08 Klas Lindfors * pam_yubico.c: replace fopen with open+fdopen to set more restrictive bits 2012-06-05 Clemens Lang * configure.ac: Silence warning: missing AM_PROG_AR on non-POSIX Automake 1.12 complains: "linking libraries using a non-POSIX archiver requires 'AM_PROG_AR' in 'configure.ac'". This patch silences this warning, allowing automake 1.12 to process configure.ac with -Werror 2012-03-27 James Dingwall * configure.ac: Modify the PAM headers test in configure.ac to #include . This is required to compile conftest.c for pam_modutil.h on Gentoo with sys-libs/pam-1.1.5 sys-libs/glibc-2.13-r4 sys-devel/gcc-4.5.3-r2 2012-03-05 Fredrik Thulin * README: Correct libyubikey requirement 2012-03-05 Fredrik Thulin * configure.ac: libyubikey is really only required --with-cr 2012-02-13 Fredrik Thulin * pam_yubico.c, util.c, util.h: load_chalresp_state: Debug message was always shown. 2012-02-10 Fredrik Thulin * NEWS: Prepare version 2.11 2012-02-10 Fredrik Thulin * pam_yubico.c: do_challenge_response: Clear errno when done. 2012-02-10 Fredrik Thulin * ykpamcfg.1: Fix project name. 2012-02-10 Fredrik Thulin * util.c: Avoid warnings for fscanf() by passing pointer to first element of array. 2012-02-10 Fredrik Thulin * drop_privs.c: include stdlib, for malloc() 2012-02-10 Fredrik Thulin * pam_yubico.c: DBG format fix 2012-02-08 Fredrik Thulin * pam_yubico.c, ykpamcfg.c: Fix clang indicated printf format warnings. 2012-02-06 Fredrik Thulin * pam_yubico.c: Fix debug-logging of chalresp_path. Oddity reported by clang. 2012-02-06 Fredrik Thulin * pam_yubico.c: snprintf returns an int, not a size_t. reported by clang. 2012-02-02 Fredrik Thulin * NEWS: Describe recent changes. 2012-02-02 Fredrik Thulin * README: Remove redundant explanation of 'capath'. 2012-02-02 Fredrik Thulin * : commit bf8ececae38a27c09c695ecc934119d3dd2fe1a7 Author: Remi Mollon Date: Wed Feb 1 09:29:27 2012 +0100 2012-02-01 Remi Mollon * pam_yubico.c: renaming yubi_prefix to yubi_Attr_prefix and changing debug 2012-01-28 Clemens Lang * util.h: Make yubico-pam compile without -DDEBUG_PAM 2012-01-28 Clemens Lang * pam_yubico.c, util.c: Add missing headers fcntl.h in pam_yubico.c is needed on OS X with clang for the build to succeed, while unistd.h in util.c is required so clang doesn't complain about implicit declarations of ftruncate and fsync. 2012-01-28 Clemens Lang * util.c: Fix memset() with wrong size as reported by clang 2012-01-27 Fredrik Thulin * pam_yubico.c: Avoid double fclose() in some error cases. Problem reported (and patched) by Lingzhu Xiang in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657524 2012-01-24 Remi Mollon * pam_yubico.c: add comment 2012-01-23 Simon Josefsson * doc: Update doc/. 2012-01-23 Simon Josefsson * configure.ac: Fix automake warning. 2012-01-23 Simon Josefsson * COPYING, Makefile.am, NEWS, README, configure.ac, drop_privs.c, drop_privs.h, pam_yubico.c, test.c, util.c, util.h, ykpamcfg.1, ykpamcfg.c: Bump version. Use silent rules. Bump copyright years. 2012-01-18 Remi Mollon * pam_yubico.c: adding yubi_prefix parameter, when looking for token_id in ldap 2011-12-14 Fredrik Thulin * : commit 6c23f476458961c202758375d0ce2d11888dda32 Author: Fredrik Thulin Date: Wed Dec 14 13:11:12 2011 +0100 2011-12-14 Fredrik Thulin * Makefile.am: check-doc-dist: restore submodule doc branch master 2011-12-14 Fredrik Thulin * NEWS: New date for 2.10 release (today). 2011-12-13 Simon Josefsson * README, configure.ac: Shift blame. 2011-12-13 Fredrik Thulin * pam_yubico.c: authorize_user_token: Don't drop privs for system-wide file. 2011-12-13 Fredrik Thulin * drop_privs.c: Bug fix dropping privileges using pam_modutil_drop_priv. 2011-12-13 Fredrik Thulin * NEWS: prepare 2.10 2011-12-13 Fredrik Thulin * configure.ac, test.c: update copyright for files changed 2011 2011-12-12 Fredrik Thulin * README: Document arguments token_id_length and mode. 2011-12-12 Fredrik Thulin * AUTHORS: Compile list of authors from ChangeLog. 2011-12-12 Fredrik Thulin * COPYING: update 2011-12-06 Fredrik Thulin * configure.ac: Prepare version 2.10. 2011-12-06 Fredrik Thulin * test.c: Pedantically removing warnings. 2011-12-06 Fredrik Thulin * test.c: Fix implicit declaration warning. 2011-12-06 Fredrik Thulin * util.c: challenge_response: reject bad slot 2011-12-06 Fredrik Thulin * util.c, util.h, ykpamcfg.c: Further pointer signedness fixes. 2011-12-06 Fredrik Thulin * pam_yubico.c: do_challenge_response: Remove 2 unused variables. 2011-12-06 Fredrik Thulin * ykpamcfg.1: Hyphen-fix. 2011-12-06 Fredrik Thulin * pam_yubico.c, util.c: Fix implicit yubikey_* declarations. 2011-12-06 Fredrik Thulin * util.c: Avoid asprintf. To improve portability, we do malloc() + snprintf() instead. 2011-12-06 Fredrik Thulin * pam_yubico.c, util.c, ykpamcfg.c: Fix pointer signedness warnings. 2011-12-06 Fredrik Thulin * util.c: generate_random: Remove unused variable 'i'. 2011-12-01 Fredrik Thulin * ykpamcfg.1: fix lintian errors 2011-11-23 Fredrik Thulin * NEWS: Update with new things in 2.10. 2011-11-23 Fredrik Thulin * pam_yubico.c: Drop privileges before writing new C-R file. 2011-11-23 Fredrik Thulin * pam_yubico.c: Verify that challenge-response file is a normal file. 2011-11-23 Fredrik Thulin * pam_yubico.c: improve debug messages 2011-11-23 Fredrik Thulin * Makefile.am, configure.ac, drop_privs.c, drop_privs.h, pam_yubico.c: Use pam_modutil_drop_priv if it is available. Utility functions for what was done in drop_priv.c appeared in PAM 1.1.3. Use them when available. 2011-11-23 Fredrik Thulin * pam_yubico.c: Restore challenge-response functionality. HAVE_LIBYKPERS_1 did not seem to ever get defined, so use HAVE_CR instead. 2011-11-23 Ricky Zhou * drop_privs.c, drop_privs.h, pam_yubico.c: Drop privileges before opening user files. This change also ensures that user tokens are regular files. We may want to add a similar check for user challenge files. 2011-11-22 Fredrik Thulin * pam_yubico.c: Remove unused variable and extra undef. 2011-11-22 Fredrik Thulin * pam_yubico.c: pam_sm_authenticate: check strdup return value 2011-11-22 Fredrik Thulin * pam_yubico.c: authorize_user_token_ldap: check malloc return value 2011-11-22 Fredrik Thulin * ykpamcfg.c: parse_args: getopt() return value is int. 2011-11-17 Fredrik Thulin * NEWS: Fix release date of 2.9. 2011-11-17 Fredrik Thulin * Makefile.am: Link pam_yubico.la directly with -lpam. 2011-11-08 Fredrik Thulin * README, doc: updates 2011-11-08 Fredrik Thulin * NEWS, configure.ac: Prepare for version 2.9. 2011-11-08 dr8 * pam_yubico.c: Bug fix: pam_yubico doesn't check server signature Squashed commit of the following: commit 9e7746bc53957f2a1e68784c0c26d082049180a7 Author: dr8 Date: Mon Oct 31 14:27:47 2011 +0000 Bug fix: pam_yubico doesn't check server signature commit 2f3d5e721cbfc905582da6208495c1da6dd2f79c Author: dr8 Date: Sat Oct 29 16:59:08 2011 +0100 Bug fix: pam_yubico does not validate server signature commit 58a1e6820a88f6aa365ef006e9cca4c62af7c7cf Author: dr8 Date: Fri Oct 28 22:09:49 2011 +0100 only validate server signature when key is specified commit d705f429bc972f85a50f0b2f96703cbdc28b744f Author: dr8 Date: Tue Oct 25 22:45:22 2011 +0100 fix failure to validate server signature 2011-08-26 Fredrik Thulin * NEWS, configure.ac: Prepare for version 2.8. 2011-08-26 Nanakos Chrysostomos * pam_yubico.c: Fix big security hole: Authentication succeeded when no password was given, unless use_first_pass was being used. This is fatal if pam_yubico is considered 'sufficient' in the PAM configuration. Signed-off-by: Nanakos Chrysostomos 2011-06-07 Simon Josefsson * NEWS: Fix date. 2011-06-07 Simon Josefsson * Makefile.am: Fix release target. 2011-06-07 Simon Josefsson * .gitignore: Ignore more. 2011-06-07 Simon Josefsson * doc: Update doc/. 2011-06-07 Simon Josefsson * NEWS: Version 2.7. 2011-06-07 Simon Josefsson * .gitignore, Makefile.am, NEWS, configure.ac, pam_yubico.c, util.c, util.h: Make dependency on libykpers optional. Use --without-cr to force it. Reported by Jussi Sallinen . 2011-04-15 Fredrik Thulin * pam_yubico.c: parse_cfg: Use memset to clear cfg struct. The code will be easier to maintain if one does not have to remember explicitly initializing all new members of the config struct. 2011-04-15 Fredrik Thulin * pam_yubico.c: Fix some D's that should've been DBG. 2011-04-15 Fredrik Thulin * pam_yubico.c: Make DBG macro unified. Refactor authorize_user_token and authorize_user_token_ldap to take a cfg argument instead of a number of elements from cfg. 2011-04-15 Romain Riviere * pam_yubico.c: Debug: adding a dbg flag and macro so as to disable unwanted debug messages 2011-04-13 Fredrik Thulin * README: Add mentioning of recursive dependency on libyubikey. 2011-04-13 Fredrik Thulin * Makefile.am: Tag releases consistent with previous ones (no 'v'). 2011-04-13 Fredrik Thulin * README: sync 2011-04-11 Fredrik Thulin * README: sync 2011-03-23 Fredrik Thulin * Makefile.am, configure.ac: Explicitly link with libyubikey. 2011-04-11 Fredrik Thulin * NEWS: Version 2.6. 2011-04-11 Fredrik Thulin * util.c, ykpamcfg.c: whitespace 2011-03-18 Tollef Fog Heen * pam_yubico.c: Tell the user if something goes wrong after authenticating If we successfully authenticate, but something then goes wrong, such as failure to generate a new challenge, failure to update the challenge and so on, tell the user. 2011-03-18 Tollef Fog Heen * : Merge remote branch 'fredrikt/master' Conflicts: util.c 2011-03-17 Fredrik Thulin * Makefile.am, ykpamcfg.1, ykpamcfg.c: Add ykpamcfg - C/R setup command line utility. 2011-03-17 Fredrik Thulin * pam_yubico.c, util.c, util.h: Make get_user_challenge_file() also include YubiKey serial number, and move it to util.c. 2011-03-17 Fredrik Thulin * util.c: Version-tag challenge-response state file contents. Helps in case we ever want to change the file format. 2011-03-17 Fredrik Thulin * pam_yubico.c, util.c, util.h: Further cleanups to challenge response code, and move more code to util.c. 2011-03-17 Fredrik Thulin * pam_yubico.c: Revert "Wait with declaring PAM_SUCCESS on challenge-response until new" Tollef has argued that the login should not fail if, for example, the disk is full. I'd rather fail on the cautious side and make sure we don't end up always sending the same challenge to the YubiKey, but I'll leave it up to Tollef to decide for now. This reverts commit 14e917ffae52e05121a69a192d03f98090e8ae41. Conflicts: pam_yubico.c 2011-03-17 Fredrik Thulin * pam_yubico.c, util.c, util.h: Move more challenge-response code to util.c. 2011-03-17 Fredrik Thulin * Makefile.am, pam_yubico.c, util.c, util.h: Move soon-to-be commonly used code to util.c 2011-03-16 Tollef Fog Heen * pam_yubico.c: Use a temporary file to ensure we always have a challenge If we use ftruncate we might end up in the situation that we do not have a challenge on disk, leading to the user being unable to log in. By using a temporary file, fsync and rename we avoid this problem. 2011-03-17 Fredrik Thulin * Makefile.am, ykpamcfg.1, ykpamcfg.c: Add ykpamcfg - C/R setup command line utility. 2011-03-17 Fredrik Thulin * pam_yubico.c, util.c, util.h: Make get_user_challenge_file() also include YubiKey serial number, and move it to util.c. 2011-03-17 Fredrik Thulin * util.c: Version-tag challenge-response state file contents. Helps in case we ever want to change the file format. 2011-03-17 Fredrik Thulin * pam_yubico.c, util.c, util.h: Further cleanups to challenge response code, and move more code to util.c. 2011-03-17 Fredrik Thulin * pam_yubico.c: Revert "Wait with declaring PAM_SUCCESS on challenge-response until new" Tollef has argued that the login should not fail if, for example, the disk is full. I'd rather fail on the cautious side and make sure we don't end up always sending the same challenge to the YubiKey, but I'll leave it up to Tollef to decide for now. This reverts commit 14e917ffae52e05121a69a192d03f98090e8ae41. Conflicts: pam_yubico.c 2011-03-17 Fredrik Thulin * pam_yubico.c, util.c, util.h: Move more challenge-response code to util.c. 2011-03-17 Fredrik Thulin * Makefile.am, pam_yubico.c, util.c, util.h: Move soon-to-be commonly used code to util.c 2011-03-14 Fredrik Thulin * pam_yubico.c: Remove hard coded values for challenge/responses. Also do some input validation on what we read from the C/R file. 2011-03-14 Fredrik Thulin * pam_yubico.c: generate_challenge() only generated half as many bytes as it should. Changed generate_challenge() to generating bytes instead of a hex encoded string, to not have to decode what we just encoded - instead just generate plain bytes of randomness and then encode them once. 2011-03-16 Tollef Fog Heen * pam_yubico.c: Use a temporary file to ensure we always have a challenge If we use ftruncate we might end up in the situation that we do not have a challenge on disk, leading to the user being unable to log in. By using a temporary file, fsync and rename we avoid this problem. 2011-03-14 Fredrik Thulin * pam_yubico.c: fsync() wants file descriptor Also, truncate file before writing if the challenge length has changed (became shorter) or garbage has otherwise been appended. 2011-03-14 Fredrik Thulin * pam_yubico.c: Don't generate new challenge on bad response. 2011-03-14 Fredrik Thulin * pam_yubico.c: Support challenge-response files outside user's home directory. Having the challege-response data inside the home directory won't work very well if the YubiKey is to unlock an ecryptfs encrypted home directory. 2011-03-16 Tollef Fog Heen * : Merge remote branch 'origin/master' 2011-03-14 Fredrik Thulin * pam_yubico.c: generate_challenge() only generated half as many bytes as it should. Changed generate_challenge() to generating bytes instead of a hex encoded string, to not have to decode what we just encoded - instead just generate plain bytes of randomness and then encode them once. 2011-03-14 Fredrik Thulin * pam_yubico.c: Wait with declaring PAM_SUCCESS on challenge-response until new challenge-response has been stored properly on disk. 2011-03-14 Fredrik Thulin * pam_yubico.c: fsync() wants file descriptor Also, truncate file before writing if the challenge length has changed (became shorter) or garbage has otherwise been appended. 2011-03-14 Fredrik Thulin * pam_yubico.c: Don't generate new challenge on bad response. 2011-03-14 Fredrik Thulin * pam_yubico.c: Support challenge-response files outside user's home directory. Having the challege-response data inside the home directory won't work very well if the YubiKey is to unlock an ecryptfs encrypted home directory. 2011-03-14 Fredrik Thulin * : Merge remote branch 'remim/master' 2011-03-12 Tollef Fog Heen * pam_yubico.c: Undef USERFILE when we don't need it any more 2011-03-12 Tollef Fog Heen * Makefile.am, configure.ac: Look for libykpers-1, which we will need for challenge-response 2011-03-12 Tollef Fog Heen * pam_yubico.c: Get rid of unimplemented PAM functions 2011-03-10 Fredrik Thulin * : commit 27346d9be9739954dadf24c460c74b8ea4043488 Author: Fredrik Thulin Date: Thu Mar 10 10:48:20 2011 +0100 2011-03-04 Fredrik Thulin * pam_yubico.c: Ignore errors from pam_get_data(). 2011-03-03 Fredrik Thulin * pam_yubico.c: Correct debug log message for too short OTPs. 2011-03-03 Fredrik Thulin * : commit 952668811dd212d7444d4903feacaa40d30f4ea8 Merge: 60d9e60 702ac98 Author: Fredrik Thulin Date: Thu Mar 3 15:06:22 2011 +0100 2011-03-03 Fredrik Thulin * pam_yubico.c: Bugfix getting option token_id_length. 2011-03-03 Fredrik Thulin * pam_yubico.c: Avoid logging passwords when debug is enabled. Problem reported in http://code.google.com/p/yubico-pam/issues/detail?id=28 2011-03-03 Fredrik Thulin * : commit abb0b7e4e4d9ed0e09778815328126c6813b0d78 Author: Fredrik Thulin Date: Thu Mar 3 14:14:54 2011 +0100 2011-03-03 Fredrik Thulin * pam_yubico.c: authorize_user_token_ldap: Don't leak memory on failures. 2011-03-03 Fredrik Thulin * pam_yubico.c: authorize_user_token_ldap: sr was under-allocated by one byte. Also change strcat's to sprintf to make code easier to maintain. 2011-03-03 Fredrik Thulin * pam_yubico.c: Don't segfault on unset LDAP parameters. When ldapserver / ldap_uri was specified, but not for example user_attr, authorize_user_token_ldap() used to cause a segmentation fault. 2011-03-03 Fredrik Thulin * pam_yubico.c: Use LDAPv3 instead of LDAPv2. LDAPv2 was declared historical in 2003, and is now not supported by for example Mac OS X Server's Open Directory. Patch by maxsanna81@gmail.com. 2011-03-03 Fredrik Thulin * pam_yubico.c: Avoid LDAP warnings about deprecated functions. Patch by judas.iscariote. 2011-03-03 Fredrik Thulin * pam_yubico.c: authorize_user_token_ldap: Use correct LDAP free function. Patch by judas.iscariote. 2011-02-28 Fredrik Thulin * pam_yubico.c: Make length of public ID part of tokens configurable. Now that we support setting URL, not all public ID's can be expected to be six bytes (the length used in the YubiCloud validation service). Unfortunately we can't support OTPs of different lengths at once, because there is code supporting users entering their (other) password followed by the OTP from the YubiKey. Patch by fraser.scott@gmail.com in http://code.google.com/p/yubico-pam/issues/detail?id=19 2011-03-02 Fredrik Thulin * configure.ac: Check for ykclient-2.4+, since we use new ca_path function. 2011-02-28 Fredrik Thulin * pam_yubico.c: Add debug output of url and capath. 2011-02-22 Fredrik Thulin * : commit e3440786bfa3c3475721b5933b8ab6c8074d1e64 Author: Fredrik Thulin Date: Wed Feb 16 22:22:23 2011 +0100 2011-02-16 Fredrik Thulin * doc: sync 2011-02-16 Fredrik Thulin * Makefile.am: Change to make releases from Github. 2011-02-16 Fredrik Thulin * README: Convert to asciidoc (used by Github wiki). 2011-02-16 Fredrik Thulin * .gitmodules: Add submodule doc. 2011-02-11 Remi Mollon * pam_yubico.c: Add capath parameter to PAM module 2011-02-11 Remi Mollon * pam_yubico.c: Add capath parameter to PAM module 2010-09-10 Simon Josefsson * NEWS, configure.ac: Bump versions. 2010-09-10 Simon Josefsson * Makefile.am: Fix. 2010-09-10 Simon Josefsson * NEWS: Add. 2010-09-10 Simon Josefsson * Makefile.am: Include wiki pages in distribution. 2010-09-10 Simon Josefsson * Makefile.am: Fix release target. 2010-09-09 Simon Josefsson * NEWS, configure.ac: Bump versions. 2010-09-09 Simon Josefsson * NEWS: Version 2.4. 2010-09-09 Simon Josefsson * NEWS: Add. 2010-09-09 Simon Josefsson * NEWS, pam_yubico.c: Fix segmentation fault on 64-bit systems. Reported by multiple people in Issue #11 . 2010-09-09 Simon Josefsson * README: Improve verbose_otp documentation. 2010-09-09 Simon Josefsson * pam_yubico.c: Handle ^D at su prompt. 2010-07-13 Simon Josefsson * NEWS, pam_yubico.c: Make deprecated "ldapserver" work again. Reported by giovannibajo in Issue #27: . 2010-05-20 Erinn Looney-Triggs * README: Update README to clarify a few points, put in wiki markup and add section on how to locate the token ID. 2010-04-14 Simon Josefsson * README: Document "verbose_otp". From qistoph in http://code.google.com/p/yubico-pam/issues/detail?id=22 2010-04-14 Simon Josefsson * Makefile.am, NEWS: Build with -DPAM_DEBUG so that debug file writing works. Reported by qistoph in Issue #20: . 2010-04-14 Simon Josefsson * NEWS, pam_yubico.c: New keyword "verbose_otp" to allow displaying OTP characters. Contributed by qistoph reported in Issue #22: . 2010-04-14 Simon Josefsson * Makefile.am: Save a local copy of released archives. 2010-04-14 Simon Josefsson * NEWS, configure.ac: Bump versions. 2010-04-14 Simon Josefsson * Makefile.am: Fix googlecode_upload username. 2010-04-14 Simon Josefsson * NEWS: Version 2.3. 2010-04-14 Simon Josefsson * NEWS: Add. 2010-04-14 Simon Josefsson * NEWS, pam_yubico.c: Add deprecated support for old ldapserver keyword. 2010-04-14 Simon Josefsson * README: Re-add documentation for "ldapserver". 2010-04-14 Simon Josefsson * README: More fixes from Erinn Looney-Triggs . 2010-04-13 Simon Josefsson * README: More fixes from Erinn Looney-Triggs . 2010-04-13 Simon Josefsson * pam_yubico.c: Doc fix. 2010-04-13 Simon Josefsson * README: Describe authfile parameter. From Erinn Looney-Triggs . 2009-08-11 zubrick433 * README, pam_yubico.c: Corrections in ldap part:Â Removed deprecated ldap functions. New functions need a ldap uri instead of a hostname. changed configuration parameter ldapserver to ldap_uri to reflect change and avoid errors in configuration. Search string are now of variable size depending on configuration parameters length, instead of an arbitrary fixed length. Modified README for the new ldap_uri configuration parameter 2009-06-22 Simon Josefsson * Makefile.am: Fix release target. 2009-05-11 Simon Josefsson * NEWS, configure.ac: Bump versions. 2009-05-11 Simon Josefsson * NEWS: Version 2.2. 2009-05-11 Simon Josefsson * NEWS: Add. 2009-05-11 Simon Josefsson * README, configure.ac, pam_yubico.c: Add new key parameter to set verification key. 2009-05-11 Simon Josefsson * pam_yubico.c: Don't output debug information unconditionally. 2009-03-31 Simon Josefsson * NEWS, configure.ac: Bump versions. 2009-03-31 Simon Josefsson * NEWS: Version 2.1. 2009-03-31 Simon Josefsson * NEWS: Add. 2009-03-31 Simon Josefsson * Makefile.am: Fix release target. 2009-03-31 Simon Josefsson * README: Fix. 2009-03-30 Simon Josefsson * pam_yubico.c: Avoid warning. 2009-03-25 Simon Josefsson * NEWS, configure.ac: Bump versions. 2009-03-25 Simon Josefsson * NEWS: Version 2.0. 2009-03-25 Simon Josefsson * Makefile.am, NEWS, README, configure.ac, pam_yubico.c: Use and require libykclient v2.0+. 2009-03-24 Simon Josefsson * README: Fix. 2009-03-24 Simon Josefsson * README: Fix. 2009-03-24 Simon Josefsson * build-aux/config.rpath, m4/lib-ld.m4, m4/lib-link.m4, m4/lib-prefix.m4: Update gnulib files. 2009-03-24 Simon Josefsson * NEWS, configure.ac: Bump versions. 2009-03-24 Simon Josefsson * Makefile.am: Reorder. 2009-03-24 Simon Josefsson * NEWS: Version 1.14. 2009-03-24 Simon Josefsson * NEWS: Add. 2009-03-24 Simon Josefsson * pam_yubico.c: Improve matching logic. 2009-03-24 Simon Josefsson * NEWS, configure.ac: Bump versions. 2009-03-24 Simon Josefsson * Makefile.am: Fix release target. 2009-03-24 Simon Josefsson * NEWS: Version 1.13. 2009-03-24 Simon Josefsson * pam_yubico.c: Fix crash on memory errors. 2009-03-24 Simon Josefsson * NEWS: Add. 2009-03-24 Simon Josefsson * pam_yubico.c: Fix parsing of password+otp into id/otp/passwd. Fix return codes. Fix setcred. 2009-03-24 Simon Josefsson * pam_yubico.c: Fix ykc handling. 2009-03-24 Simon Josefsson * pam_yubico.c: Reduce failure points with live unverified OTP. 2009-03-24 Simon Josefsson * pam_yubico.c: Split off configuration parsing. 2009-03-24 Simon Josefsson * NEWS, pam_yubico.c: Don't pass integers via pam_set_data/pam_get_data. 2009-03-24 Simon Josefsson * NEWS, configure.ac: Bump versions. 2009-03-24 Simon Josefsson * Makefile.am: Fix dist target. 2009-03-24 Simon Josefsson * NEWS: Version 1.12. 2009-03-24 Simon Josefsson * Makefile.am: Fix release target. 2009-03-24 Simon Josefsson * NEWS: Add. 2009-03-24 Simon Josefsson * NEWS, README, pam_yubico.c: Support use_first_pass and try_first_pass. 2009-03-24 Simon Josefsson * NEWS, configure.ac: Bump version. 2009-02-11 Simon Josefsson * NEWS: Version 1.11. 2009-02-11 Simon Josefsson * configure.ac: Check for better symbol in -lldap. 2009-02-11 Simon Josefsson * pam_yubico.c: Fix typo. 2009-02-11 Simon Josefsson * NEWS: Add. 2009-02-11 Simon Josefsson * pam_yubico.c: Indent code. Add FIXME note. Handle NULL values in debug strings. 2009-02-11 zubrick433 * Makefile.am, README, configure.ac, pam_yubico.c: Added ldap support 2009-01-13 Simon Josefsson * NEWS: Version 1.10. 2009-01-13 Simon Josefsson * README: Doc fix. 2009-01-13 Simon Josefsson * test.c: Indent. 2009-01-13 Simon Josefsson * COPYING, Makefile.am, NEWS, README, configure.ac, pam_yubico.c, test.c: Change license to 2-clause BSD. 2009-01-13 Simon Josefsson * NEWS: Version 1.9. 2009-01-13 Simon Josefsson * pam_yubico.c: Support debugging even on non-Linux. 2009-01-13 Simon Josefsson * pam_yubico.c: Avoid use of asprintf, to fix Solaris. Suggested by Martin Englund . 2009-01-13 Simon Josefsson * configure.in => configure.ac: Rename. 2009-01-13 Simon Josefsson * NEWS: Add. 2009-01-13 Simon Josefsson * configure.in: Disable static libraries, not supported and breaks building on Solaris. 2009-01-13 Simon Josefsson * test.c: Don't include pam_misc.h, doesn't exist on Solaris. 2009-01-13 Simon Josefsson * configure.in: Improve PAM header test. 2009-01-13 Simon Josefsson * NEWS, configure.in: Bump versions. 2008-09-15 Simon Josefsson * Makefile.am: Fix release target. 2008-09-15 Simon Josefsson * Makefile.am: generate changelog 2008-09-15 Simon Josefsson * NEWS: Version 1.8. 2008-09-15 Simon Josefsson * NEWS, README, pam_yubico.c: Add new parameter 'url' to specify the server template URL. 2008-09-01 Simon Josefsson * NEWS, configure.in: Bump versions. 2008-09-01 Simon Josefsson * NEWS: Version 1.7. 2008-09-01 Simon Josefsson * NEWS: Add. 2008-09-01 Simon Josefsson * configure.in: Bump version. 2008-09-01 Simon Josefsson * Makefile.am: Drop manual. 2008-09-01 Simon Josefsson * pam_yubico.c: Indent. 2008-09-01 Simon Josefsson * pam_yubico.c: Merge in Samir's work. Support two-factor mode. Support user configurations. 2008-06-25 Simon Josefsson * README: Drop url parameter. 2008-06-25 Simon Josefsson * README: Update. 2008-06-25 Simon Josefsson * Makefile.am: Drop curl. 2008-06-25 Simon Josefsson * NEWS: Add. 2008-06-25 Simon Josefsson * configure.in, m4/libcurl.m4, pam_yubico.c: Use libyubikey-client instead of curl directly. 2008-06-25 Simon Josefsson * Makefile.am: Link to libyubikey-client too. 2008-06-25 Simon Josefsson * NEWS: Reformat. 2008-06-25 Simon Josefsson * Makefile.am, build-aux/config.rpath, configure.in, m4/lib-ld.m4, m4/lib-link.m4, m4/lib-prefix.m4, libcurl.m4 => m4/libcurl.m4: Create m4/ and build-aux/ and use them. 2008-05-03 Simon Josefsson * README: Convert to google code wiki markup. 2008-05-02 Simon Josefsson * README: Better to move pam_yubico.so, in case of separate /usr partition. 2008-05-02 Simon Josefsson * README: Libtool is needed too. 2008-01-11 Simon Josefsson * pam_yubico.c: Remove obsolete comments. 2008-01-11 Simon Josefsson * NEWS: Add. 2008-01-11 Simon Josefsson * NEWS, configure.in: Bump version. 2008-01-11 Simon Josefsson * Makefile.am: Add release target. 2008-01-11 Simon Josefsson * README: Add info. 2008-01-11 Simon Josefsson * COPYING, Makefile.am, NEWS, README, configure.in, libcurl.m4, pam_yubico.c, test.c: Import from private CVS repository. 2008-01-11 no author * Initial directory structure.