isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

In struct sudo_auth, turn need_root and configured into flags and

Browse Source 
add a flag to specify an auth method is running alone (the only
one).  Pass auth methods their sudo_auth pointer, not the data
pointer.  This allows us to get at the flags and tell if we are the
only auth method.  That, in turn, allows the method to be able to
decide what should/should not be a fatal error.  Currently only
rfc1938 uses it this way, which allows us to kill the OTP_ONLY
define and te hackery that went with it.  With access to the
sudo_auth struct, methods can also get at a string holding their
cannonical name (useful in error messages).
This commit is contained in:
Todd C. Miller
1999-08-14 15:36:47 +00:00
parent 3a8b0be635
commit d40947c0b0
15 changed files with 215 additions and 185 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
auth/kerb5.c
View File

@@ -69,10 +69,10 @@ static krb5_context sudo_context = NULL;
static int verify_krb_v5_tgt __P((krb5_ccache));
int
kerb5_init(pw, promptp, data)
kerb5_init(pw, promptp, auth)
struct passwd *pw;
char **promptp;
void **data;
sudo_auth *auth;
{
char *lrealm;
krb5_error_code retval;
@@ -85,12 +85,11 @@ kerb5_init(pw, promptp, data)
"unable to initialize Kerberos V context");
return(AUTH_FATAL);
}
*data = (void *) &sudo_context; /* save a pointer to the context */
auth->data = (VOID *) &sudo_context; /* save a pointer to the context */
krb5_init_ets(sudo_context);
if (retval = krb5_get_default_realm(sudo_context, &lrealm)) {
set_perms(PERM_USER, 0);
log_error(NO_EXIT|NO_MAIL,
"unable to get default Kerberos V realm");
return(AUTH_FATAL);
@@ -110,10 +109,10 @@ kerb5_init(pw, promptp, data)
}
int
kerb5_verify(pw, pass, data)
kerb5_verify(pw, pass, auth)
struct passwd *pw;
char *pass;
void **data;
sudo_auth *auth;
{
krb5_error_code retval;
krb5_principal princ;