freebsd-src/lib/libtacplus
Dag-Erling Smørgrav 21850106fd libtacplus: Allow additional AV pairs to be configured.
* Replace hand-rolled input tokenizer with openpam_readlinev() which supports line continuations and has better quoting and escaping.
* Simplify string handling by merging struct clnt_str and struct srvr_str into just struct tac_str.
* Each server entry in the configuration file can now have up to 255 AV pairs which will be appended to the ones returned by the server in response to a successful authorization request.

This allows nss_tacplus(8) to be used with servers which do not provide identity information beyond confirming the existence of the user.

This adds a dependency on libpam, however libtacplus is currently only used by pam_tacplus(8) (which is already always used with libpam) and the very recently added nss_tacplus(8) (which is extremely niche).  In the longer term it might be a good idea to split this out into a separate library.

MFC after:	1 week
Sponsored by:	Klara, Inc.
Reviewed by:	pauamma_gundo.com, markj
Differential Revision:	https://reviews.freebsd.org/D40285
Relnotes:	yes
2023-06-13 16:08:08 +00:00
..
libtacplus.3
Makefile libtacplus: Allow additional AV pairs to be configured. 2023-06-13 16:08:08 +00:00
Makefile.depend Update Makefile.depend files 2019-12-11 17:37:53 +00:00
taclib.c libtacplus: Allow additional AV pairs to be configured. 2023-06-13 16:08:08 +00:00
taclib.h taclib: 0 (not set) is a valid auth type in authorization requests. 2023-05-22 10:01:04 +00:00
taclib_private.h libtacplus: Allow additional AV pairs to be configured. 2023-06-13 16:08:08 +00:00
tacplus.conf.5 libtacplus: Allow additional AV pairs to be configured. 2023-06-13 16:08:08 +00:00