Dag-Erling Smørgrav 5761f8a7de libtacplus: Allow additional AV pairs to be configured. ... * Replace hand-rolled input tokenizer with openpam_readlinev() which supports line continuations and has better quoting and escaping. * Simplify string handling by merging struct clnt_str and struct srvr_str into just struct tac_str. * Each server entry in the configuration file can now have up to 255 AV pairs which will be appended to the ones returned by the server in response to a successful authorization request. This allows nss_tacplus(8) to be used with servers which do not provide identity information beyond confirming the existence of the user. This adds a dependency on libpam, however libtacplus is currently only used by pam_tacplus(8) (which is already always used with libpam) and the very recently added nss_tacplus(8) (which is extremely niche). In the longer term it might be a good idea to split this out into a separate library. MFC after: 1 week Sponsored by: Klara, Inc. Reviewed by: pauamma_gundo.com, markj Differential Revision: https://reviews.freebsd.org/D40285 Relnotes: yes (cherry picked from commit 21850106fd)		2023-12-13 17:08:13 +01:00
..
libtacplus.3	Remove $FreeBSD$: two-line nroff pattern	2023-08-23 11:43:31 -06:00
Makefile	libtacplus: Allow additional AV pairs to be configured.	2023-12-13 17:08:13 +01:00
Makefile.depend	Remove $FreeBSD$: one-line sh pattern	2023-08-23 11:43:30 -06:00
taclib_private.h	libtacplus: Allow additional AV pairs to be configured.	2023-12-13 17:08:13 +01:00
taclib.c	libtacplus: Allow additional AV pairs to be configured.	2023-12-13 17:08:13 +01:00
taclib.h	taclib: 0 (not set) is a valid auth type in authorization requests.	2023-12-13 17:08:13 +01:00
tacplus.conf.5	libtacplus: Allow additional AV pairs to be configured.	2023-12-13 17:08:13 +01:00