mirrors/linux-pam
0
0
Fork 0
mirror of https://github.com/linux-pam/linux-pam.git synced 2024-11-28 04:03:40 +08:00
Code Issues Packages Projects Releases Wiki Activity

Improve documentation of the sufficient and requisite control values. (Red Hat Bug #742413)

Browse Source
This commit is contained in:
Tomas Mraz 2011-09-30 09:43:54 +02:00
parent 3d8a20af1f
commit c245299faf
2 changed files with 14 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ChangeLog
View File

@ -1,7 +1,12 @@
2011-09-30 Tomas Mraz <tm@t8m.info>
* doc/man/pam.conf-syntax.xml: Improve documentation of the
sufficient and requisite control values. (Red Hat Bug #742413)
2011-08-25 Tomas Mraz <tm@t8m.info>
* modules/pam_access/pam_access.c (user_match): Fix the split
on @ in the user field. (Red Hat Bug #732081)
on @ in the user field. (Red Hat Bug #732081)
* modules/pam_loginuid/pam_loginuid.c: Correct the FSF address.

17
doc/man/pam.conf-syntax.xml
View File

@ -143,7 +143,8 @@
<para>
like <emphasis>required</emphasis>, however, in the case that
such a module returns a failure, control is directly returned
to the application. The return value is that associated with
to the application or to the superior PAM stack.
The return value is that associated with
the first required or requisite module to fail. Note, this flag
can be used to protect against the possibility of a user getting
the opportunity to enter a password over an unsafe medium. It is
@ -158,14 +159,12 @@
<term>sufficient</term>
<listitem>
<para>
success of such a module is enough to satisfy the
authentication requirements of the stack of modules (if a
prior <emphasis>required</emphasis> module has failed the
success of this one is <emphasis>ignored</emphasis>). A failure
of this module is not deemed as fatal to satisfying the
application that this type has succeeded. If the module succeeds
the PAM framework returns success to the application immediately
without trying any other modules.
if such a module succeeds and no prior <emphasis>required</emphasis>
module has failed the PAM framework returns success to
the application or to the superior PAM stack immediately without
calling any further modules in the stack. A failure of a
<emphasis>sufficient</emphasis> module is ignored and processing
of the PAM module stack continues unaffected.
</para>
</listitem>
</varlistentry>