1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
samba-mirror/source3/pam_smbpass
Derrell Lipman 9c15bd311d r13212: r12414@cabra: derrell | 2006-01-28 17:52:17 -0500
lp_load() could not be called multiple times to modify parameter settings based
 on reading from multiple configuration settings.  Each time, it initialized all
 of the settings back to their defaults before reading the specified
 configuration file.

 This patch adds a parameter to lp_load() specifying whether the settings should
 be initialized.  It does, however, still force the settings to be initialized
 the first time, even if the request was to not initialize them.  (Not doing so
 could wreak havoc due to uninitialized values.)
(This used to be commit f2a24de769)
2007-10-10 11:06:18 -05:00
..
samples Added Steve Langasek <vorlon@netexpress.net> pam_smbpass PAM module code. 2001-04-24 20:00:12 +00:00
CHANGELOG Added Steve Langasek <vorlon@netexpress.net> pam_smbpass PAM module code. 2001-04-24 20:00:12 +00:00
general.h updated the 3.0 branch from the head branch - ready for alpha18 2002-07-15 10:35:28 +00:00
INSTALL compile fixes; needs testing 2002-05-09 04:05:37 +00:00
pam_smb_acct.c Patch from Steve Langasek <vorlon@netexpress.net> 2003-04-08 04:42:44 +00:00
pam_smb_auth.c r10656: BIG merge from trunk. Features not copied over 2007-10-10 11:04:48 -05:00
pam_smb_passwd.c r7126: fixing paranoid malloc checker failures 2007-10-10 10:57:01 -05:00
README Patch from Vorlon 2003-04-26 19:46:59 +00:00
support.c r13212: r12414@cabra: derrell | 2006-01-28 17:52:17 -0500 2007-10-10 11:06:18 -05:00
support.h updates from 2.2 2002-01-12 23:12:13 +00:00
TODO Added Steve Langasek <vorlon@netexpress.net> pam_smbpass PAM module code. 2001-04-24 20:00:12 +00:00

25 Mar 2001

pam_smbpass is a PAM module which can be used on conforming systems to
keep the smbpasswd (Samba password) database in sync with the unix
password file. PAM (Pluggable Authentication Modules) is an API supported
under some Unices, such as Solaris, HPUX and Linux, that provides a
generic interface to authentication mechanisms.

For more information on PAM, see http://ftp.kernel.org/pub/linux/libs/pam/

This module authenticates a local smbpasswd user database.  If you require
support for authenticating against a remote SMB server, or if you're
concerned about the presence of suid root binaries on your system, it is
recommended that you use pam_winbind instead.

Options recognized by this module are as follows:

	debug		-	log more debugging info
	audit		-	like debug, but also logs unknown usernames
	use_first_pass	-	don't prompt the user for passwords;
				take them from PAM_ items instead
	try_first_pass  -	try to get the password from a previous
				PAM module, fall back to prompting the user
	use_authtok	-	like try_first_pass, but *fail* if the new
				PAM_AUTHTOK has not been previously set.
				(intended for stacking password modules only)
	not_set_pass    -	don't make passwords used by this module
				available to other modules.
	nodelay		-	don't insert ~1 second delays on authentication
				failure.
	nullok		-	null passwords are allowed.
	nonull		-	null passwords are not allowed. Used to
				override the Samba configuration.
	migrate		-	only meaningful in an "auth" context;
				used to update smbpasswd file with a
				password used for successful authentication.
	smbconf=<file>	-	specify an alternate path to the smb.conf
				file.

See the samples/ directory for example PAM configurations using this
module.

Thanks go to the following people:

* Andrew Morgan <morgan@transmeta.com>, for providing the Linux-PAM
framework, without which none of this would have happened

* Christian Gafton <gafton@redhat.com> and Andrew Morgan again, for the
pam_pwdb module upon which pam_smbpass was originally based

* Luke Leighton <lkcl@switchboard.net> for being receptive to the idea,
and for the occasional good-natured complaint about the project's status
that keep me working on it :)

* and of course, all the other members of the Samba team 
<http://www.samba.org/samba/team.html>, for creating a great product 
and for giving this project a purpose

---------------------
Stephen Langasek <vorlon@netexpress.net>