mirror of
https://git.freebsd.org/ports.git
synced 2025-04-28 01:26:39 -04:00
50fa622e20
It occurred to me that the tacacs user is set only at build time. So, if someone assigned a different uid to their runtime tacacs user, the daemon would, by default, run under uid 559. So, add a default "-U tacacs" to the flags. While here, fix a typo in the man page.
32 lines
977 B
C
32 lines
977 B
C
--- choose_authen.c.orig 2012-04-16 21:42:55 UTC
|
|
+++ choose_authen.c
|
|
@@ -130,10 +130,27 @@ choose_login(struct authen_data *data, struct authen_t
|
|
#else /* SKEY */
|
|
report(LOG_ERR,
|
|
"%s %s: user %s s/key support has not been compiled in",
|
|
- name ? name : "<unknown>",
|
|
- session.peer, session.port);
|
|
+ session.peer, session.port,
|
|
+ name ? name : "<unknown>");
|
|
return(CHOOSE_FAILED);
|
|
#endif /* SKEY */
|
|
+ }
|
|
+
|
|
+ if (cfg_passwd && STREQ(cfg_passwd, "opie")) {
|
|
+ if (debug & DEBUG_PASSWD_FLAG)
|
|
+ report(LOG_DEBUG, "%s %s: user %s requires opie",
|
|
+ session.peer, session.port, name);
|
|
+#ifdef OPIE
|
|
+ type->authen_func = opie_fn;
|
|
+ strcpy(type->authen_name, "opie_fn");
|
|
+ return (CHOOSE_OK);
|
|
+#else /* OPIE */
|
|
+ report(LOG_ERR,
|
|
+ "%s %s: user %s opie support has not been compiled in",
|
|
+ session.peer, session.port,
|
|
+ name ? name : "<unknown>");
|
|
+ return(CHOOSE_FAILED);
|
|
+#endif /* OPIE */
|
|
}
|
|
|
|
/* Does this user require aceclnt */
|