Pavel Březina 3b7977a42c pam: pass KRB5CCNAME to pam_authenticate environment if available ...

If a PAM module wants to authenticate user using GSSAPI, the authentication
is broken if non-default ccache name is used in KRB5CCNAME environment
variable.

One way to mitigate this would be to add this to env_keep, but this also
makes the variable available in the executed command which may not
be always desirable.

This patch sets KRB5CCNAME for pam_authenticate only, if it is available
and not yet set.

2021-01-22 07:28:14 -07:00

..

afs.c

Include string.h unconditionally and only use strings.h for strn?casecmp()

2020-05-18 07:59:24 -06:00

aix_auth.c

Fix some warnings from pvs-studio

2020-08-12 13:45:09 -06:00

API

Add a force flag to sudo_auth_cleanup() to force immediate cleanup.

2020-04-01 14:41:38 -06:00

bsdauth.c

Apply Google inclusive language guidelines.

2020-10-30 10:15:30 -06:00

dce.c

Include string.h unconditionally and only use strings.h for strn?casecmp()

2020-05-18 07:59:24 -06:00

fwtk.c

Apply Google inclusive language guidelines.

2020-10-30 10:15:30 -06:00

kerb5.c

Include string.h unconditionally and only use strings.h for strn?casecmp()

2020-05-18 07:59:24 -06:00

pam.c

pam: pass KRB5CCNAME to pam_authenticate environment if available

2021-01-22 07:28:14 -07:00

passwd.c

Apply Google inclusive language guidelines.

2020-10-30 10:15:30 -06:00

rfc1938.c

Include string.h unconditionally and only use strings.h for strn?casecmp()

2020-05-18 07:59:24 -06:00

secureware.c

Use OpenBSD-compatible freezero() in place of explicit_bzero() + free()

2020-08-10 19:24:33 -06:00

securid5.c

Fix some warnings from pvs-studio

2020-08-12 13:45:09 -06:00

sia.c

Use OpenBSD-compatible freezero() in place of explicit_bzero() + free()

2020-08-10 19:24:33 -06:00

sudo_auth.c

Use OpenBSD-compatible freezero() in place of explicit_bzero() + free()

2020-08-10 19:24:33 -06:00

sudo_auth.h

Add a force flag to sudo_auth_cleanup() to force immediate cleanup.

2020-04-01 14:41:38 -06:00