rlm_pam.c File Reference

Interfaces with the PAM library to allow auth via PAM. More...

#include <freeradius-devel/server/base.h>
#include <freeradius-devel/server/module_rlm.h>
#include "config.h"

Include dependency graph for rlm_pam.c:

Go to the source code of this file.

Data Structures
struct	rlm_pam_data_t
struct	rlm_pam_t

Macros
#define	COPY_STRING(s)   ((s) ? talloc_strdup(reply, s) : NULL)

Functions
static int	do_pam (request_t *request, char const *username, char const *passwd, char const *pamauth)
	Check the users password against the standard UNIX password table + PAM. More...
static unlang_action_t	mod_authenticate (rlm_rcode_t *p_result, module_ctx_t const *mctx, request_t *request)
static int	mod_instantiate (module_inst_ctx_t const *mctx)
static int	pam_conv (int num_msg, struct pam_message const **msg, struct pam_response **resp, void *appdata_ptr)
	Dialogue between RADIUS and PAM modules. More...

Variables
static fr_dict_attr_t const *	attr_pam_auth
static fr_dict_attr_t const *	attr_user_name
static fr_dict_attr_t const *	attr_user_password
static fr_dict_t const *	dict_freeradius
static fr_dict_t const *	dict_radius
static const conf_parser_t	module_config []
module_rlm_t	rlm_pam
fr_dict_autoload_t	rlm_pam_dict []
fr_dict_attr_autoload_t	rlm_pam_dict_attr []

Detailed Description

Interfaces with the PAM library to allow auth via PAM.

Id

f10826c607fd4f50093476e1d696b611a844ccc4

Note

This was taken from the hacks that miguel a.l. paraz map@i.nosp@m.phil.nosp@m..net did on radiusd-cistron-1.5.3 and migrated to a separate file. That, in fact, was again based on the original stuff from Jeph Blaize jblai.nosp@m.ze@k.nosp@m.iva.n.nosp@m.et done in May 1997.

Copyright

2000,2006 The FreeRADIUS server project

1997 Jeph Blaize (jblai.nosp@m.ze@k.nosp@m.iva.n.nosp@m.et)

1999 miguel a.l. paraz (map@i.nosp@m.phil.nosp@m..net)

Definition in file rlm_pam.c.

---

Data Structure Documentation

rlm_pam_data_t

struct rlm_pam_data_t

Definition at line 54 of file rlm_pam.c.

Collaboration diagram for rlm_pam_data_t:

Data Fields
bool	error	True if pam_conv failed.
char const *	password	Password to provide to PAM when prompted.
request_t *	request	The current request.
char const *	username	Username to provide to PAM when prompted.

rlm_pam_t

struct rlm_pam_t

Definition at line 50 of file rlm_pam.c.

Data Fields
char const *	pam_auth_name

Macro Definition Documentation

COPY_STRING

#define COPY_STRING

(

s

)

((s) ? talloc_strdup(reply, s) : NULL)

Function Documentation

do_pam()

static int do_pam ( request_t *  request, char const *  username, char const *  passwd, char const *  pamauth  )

static

Check the users password against the standard UNIX password table + PAM.

Note

For most flexibility, passing a pamauth type to this function allows you to have multiple authentication types (i.e. multiple files associated with radius in /etc/pam.d).

Parameters

request	The current request.
username	User to authenticate.
passwd	Password to authenticate with,
pamauth	Type of PAM authentication.

Returns

• 0 on success.
• -1 on failure.

Definition at line 165 of file rlm_pam.c.

Here is the call graph for this function:

Here is the caller graph for this function:

mod_authenticate()

static unlang_action_t mod_authenticate ( rlm_rcode_t *  p_result, module_ctx_t const *  mctx, request_t *  request  )

static

Definition at line 214 of file rlm_pam.c.

Here is the call graph for this function:

mod_instantiate()

static int mod_instantiate ( module_inst_ctx_t const *  mctx )

static

Definition at line 88 of file rlm_pam.c.

pam_conv()

static int pam_conv ( int  num_msg, struct pam_message const **  msg, struct pam_response **  resp, void *  appdata_ptr  )

static

Dialogue between RADIUS and PAM modules.

Uses PAM's appdata_ptr so it's thread safe, and doesn't have any nasty static variables hanging around.

Definition at line 102 of file rlm_pam.c.

Here is the call graph for this function:

Here is the caller graph for this function:

Variable Documentation

attr_pam_auth

fr_dict_attr_t const* attr_pam_auth

static

Definition at line 76 of file rlm_pam.c.

attr_user_name

fr_dict_attr_t const* attr_user_name

static

Definition at line 77 of file rlm_pam.c.

attr_user_password

fr_dict_attr_t const* attr_user_password

static

Definition at line 78 of file rlm_pam.c.

dict_freeradius

fr_dict_t const* dict_freeradius

static

Definition at line 66 of file rlm_pam.c.

dict_radius

fr_dict_t const* dict_radius

static

Definition at line 67 of file rlm_pam.c.

module_config

const conf_parser_t module_config[]

static

Initial value:

= {
        { FR_CONF_OFFSET("pam_auth", rlm_pam_t, pam_auth_name) },
        CONF_PARSER_TERMINATOR
}

Definition at line 61 of file rlm_pam.c.

rlm_pam

module_rlm_t rlm_pam

Initial value:

= {
        .common = {
                .magic          = MODULE_MAGIC_INIT,
                .name           = "pam",
                .flags          = MODULE_TYPE_THREAD_UNSAFE,    
                .inst_size      = sizeof(rlm_pam_t),
                .config         = module_config,
                .instantiate    = mod_instantiate
        },
        .method_names = (module_method_name_t[]){
                { .name1 = "authenticate",      .name2 = CF_IDENT_ANY,          .method = mod_authenticate },
                MODULE_NAME_TERMINATOR
        }
}

Definition at line 271 of file rlm_pam.c.

rlm_pam_dict

fr_dict_autoload_t rlm_pam_dict

Initial value:

= {
        { .out = &dict_freeradius, .proto = "freeradius" },
        { .out = &dict_radius, .proto = "radius" },
        { NULL }
}

Definition at line 70 of file rlm_pam.c.

rlm_pam_dict_attr

fr_dict_attr_autoload_t rlm_pam_dict_attr

Initial value:

= {
        { .out = &attr_pam_auth, .name = "Pam-Auth", .type = FR_TYPE_STRING, .dict = &dict_freeradius },
        { .out = &attr_user_name, .name = "User-Name", .type = FR_TYPE_STRING, .dict = &dict_radius },
        { .out = &attr_user_password, .name = "User-Password", .type = FR_TYPE_STRING, .dict = &dict_radius },
        { NULL }
}

Definition at line 81 of file rlm_pam.c.