AUTHTOK Retrieval
Liam Kelly <[email protected]> Fri, 9 Feb 2018 01:24:56 -0500
| Newsgroups | gmane.linux.pam |
|---|---|
| Message-ID | <[email protected]> |
--===============7210050271813565087==
Content-Type: multipart/alternative;
boundary="_9F96218A-BB5B-46E9-9DD7-C4A8FFB19C12_"
--_9F96218A-BB5B-46E9-9DD7-C4A8FFB19C12_
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"
Hi,
I am currently unable to retrieve the password string given to my custom PA=
M module from OpenSSH Server.
I am writing a PAM module in order to allow OpenSSH Server to reference a u=
ser database on peripheral hardware. I modeled my code very similarly to `p=
am_userdb` and tested it initially with the tool in the `simple_pam` reposi=
tory on GitHub. The `simple_pam` tool worked but OpenSSH Server was not abl=
e to retreave the password for comparison. The main difference between the =
two applications is that =E2=80=98simple_pam=E2=80=99 brings up the pam_pro=
mpt and sets the AUTHTOK first while OpenSSH only allows for retrieval. I h=
ave tried both `pam_get_auth` and `pam_get_item`, but both return an empt=
y string for the SSH case. Also I get the username just fine from OpenSSH.
`pam_unix` works, so I am really confused as to why I cannot get the AUTHTO=
K. Do you think it has something to do with the module locks placed on AUTH=
OKs? Could I be missing a compiler option?
-Liam=20
--_9F96218A-BB5B-46E9-9DD7-C4A8FFB19C12_
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:w=3D"urn:sc=
hemas-microsoft-com:office:word" xmlns:m=3D"http://schemas.microsoft.com/of=
fice/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta ht=
tp-equiv=3DContent-Type content=3D"text/html; charset=3Dutf-8"><meta name=
=3DGenerator content=3D"Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=3DEN-US link=3Dblue vlink=3D"#954F72"><div cla=
ss=3DWordSection1><p class=3DMsoNormal>Hi,</p><p class=3DMsoNormal><o:p>&nb=
sp;</o:p></p><p class=3DMsoNormal>I am currently unable to retrieve the pas=
sword string given to my custom PAM module from OpenSSH Server.</p><p class=
=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal>I am writing a PAM m=
odule in order to allow OpenSSH Server to reference a user database on peri=
pheral hardware. I modeled my code very similarly to `pam_userdb` and teste=
d it initially with the tool in the `simple_pam` repository on GitHub. The =
`simple_pam` tool worked but OpenSSH Server was not able to retreave the pa=
ssword for comparison. The main difference between the two applications is =
that =E2=80=98simple_pam=E2=80=99 brings up the pam_prompt and sets the AUT=
HTOK first while OpenSSH only allows for retrieval. I have tried both `pam_=
get_auth` and =C2=A0=C2=A0`pam_get_item`, but both return an empty string f=
or the SSH case. Also I get the username just fine from OpenSSH.</p><p clas=
s=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal>`pam_unix` works, s=
o I am really confused as to why I cannot get the AUTHTOK. Do you think it =
has something to do with the module locks placed on AUTHOKs? Could I be mis=
sing a compiler option?</p><p class=3DMsoNormal><o:p> </o:p></p><p cla=
ss=3DMsoNormal>-Liam </p></div></body></html>=
--_9F96218A-BB5B-46E9-9DD7-C4A8FFB19C12_--
--===============7210050271813565087==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Pam-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/pam-list
--===============7210050271813565087==--