Author: dfr
Date: Sun Aug 5 13:40:35 2012
New Revision: 239062
URL: http://svn.freebsd.org/changeset/base/239062
Log:
Add an option for pam_krb5 to allow it to authenticate users which don't have
a local account.
PR: 76678
Submitted by: daved at tamu.edu
MFC after: 2 weeks
Modified:
head/lib/libpam/modules/pam_krb5/pam_krb5.c
Modified: head/lib/libpam/modules/pam_krb5/pam_krb5.c
==============================================================================
--- head/lib/libpam/modules/pam_krb5/pam_krb5.c Sun Aug 5 13:38:15 2012
(r239061)
+++ head/lib/libpam/modules/pam_krb5/pam_krb5.c Sun Aug 5 13:40:35 2012
(r239062)
@@ -91,6 +91,7 @@ static void compat_free_data_contents(kr
#define PAM_OPT_NO_CCACHE "no_ccache"
#define PAM_OPT_NO_USER_CHECK "no_user_check"
#define PAM_OPT_REUSE_CCACHE "reuse_ccache"
+#define PAM_OPT_NO_USER_CHECK "no_user_check"
#define PAM_LOG_KRB5_ERR(ctx, rv, fmt, ...)
\
do { \
@@ -218,10 +219,12 @@ pam_sm_authenticate(pam_handle_t *pamh,
PAM_LOG("PAM_USER Redone");
}
- pwd = getpwnam(user);
- if (pwd == NULL) {
- retval = PAM_USER_UNKNOWN;
- goto cleanup2;
+ if (!openpam_get_option(pamh, PAM_OPT_NO_USER_CHECK)) {
+ pwd = getpwnam(user);
+ if (pwd == NULL) {
+ retval = PAM_USER_UNKNOWN;
+ goto cleanup2;
+ }
}
PAM_LOG("Done getpwnam()");
_______________________________________________
svn-src-head@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"
