代码拉取完成,页面将自动刷新
// pam_usermatch module, v1.0.0, 2023-10-21
//
// Copyright (C) 2023, Martin Young <martin_young@live.cn>
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program. If not, see <https://www.gnu.org/licenses/>.
//------------------------------------------------------------------------
#include <cstring>
#include <regex>
#include <syslog.h>
#include <security/pam_modules.h>
#include <security/pam_ext.h>
using namespace std;
int pam_sm_authenticate(pam_handle_t *pamh, int flags, int argc, const char **argv)
{
int retval;
bool allow, match;
const char *puser;
regex user_regex;
switch(argc) {
case 0:
pam_syslog(pamh, LOG_ERR, "No option");
return PAM_SERVICE_ERR;
case 1:
pam_syslog(pamh, LOG_ERR, "Less option");
return PAM_SERVICE_ERR;
default:
if( strcmp(argv[1], "allow")==0 )
allow = true;
else if( strcmp(argv[1], "deny")==0 )
allow = false;
else {
pam_syslog(pamh, LOG_ERR, "Bad option: \"%s\"", argv[1]);
return PAM_SERVICE_ERR;
}
}
if( (retval=pam_get_item(pamh, PAM_USER, (const void **)&puser)) != PAM_SUCCESS ) {
pam_syslog(pamh, LOG_ERR, "Cannot determine username: %s", pam_strerror(pamh, retval));
return retval;
}
if( !(puser && *puser) ) {
pam_syslog(pamh, LOG_ERR, "Cannot determine username");
return PAM_SERVICE_ERR;
}
try {
user_regex = regex(argv[0], regex_constants::egrep);
} catch(regex_error& e) {
pam_syslog(pamh, LOG_ERR, "Regular expression error: %s", e.what());
return PAM_SERVICE_ERR;
}
match = regex_match(puser, user_regex);
if( !(allow = allow? match : !match) )
pam_syslog(pamh, LOG_NOTICE, "Access denied: Invalid username string");
return allow? PAM_SUCCESS:PAM_AUTH_ERR;
}
int pam_sm_setcred(pam_handle_t *pamh, int flags, int argc, const char **argv)
{
return PAM_SUCCESS;
}
int pam_sm_acct_mgmt (pam_handle_t *pamh, int flags, int argc, const char **argv)
{
return pam_sm_authenticate(pamh, flags, argc, argv);
}
int pam_sm_open_session (pam_handle_t *pamh, int flags, int argc, const char **argv)
{
return pam_sm_authenticate(pamh, flags, argc, argv);
}
int pam_sm_close_session (pam_handle_t *pamh, int flags, int argc, const char **argv)
{
return pam_sm_authenticate(pamh, flags, argc, argv);
}
int pam_sm_chauthtok (pam_handle_t *pamh, int flags, int argc, const char **argv)
{
return pam_sm_authenticate(pamh, flags, argc, argv);
}
此处可能存在不合适展示的内容,页面不予展示。您可通过相关编辑功能自查并修改。
如您确认内容无涉及 不当用语 / 纯广告导流 / 暴力 / 低俗色情 / 侵权 / 盗版 / 虚假 / 无价值内容或违法国家有关法律法规的内容,可点击提交进行申诉,我们将尽快为您处理。