← Back to branch summary

~ubuntu-branches/ubuntu/natty/pam/natty-security

« back to all changes in this revision

Viewing changes to doc/man/pam_sm_setcred.3.xml

  • Committer: Bazaar Package Importer
  • Author(s): Steve Langasek
  • Date: 2009-08-26 00:40:14 UTC
  • mfrom: (1.1.5 upstream)
  • Revision ID: james.westby@ubuntu.com-20090826004014-qsd46mostuyljeqp
Tags: 1.1.0-1ubuntu1
* Merge from Debian, remaining changes:
  - debian/libpam-modules.postinst: Add PATH to /etc/environment if it's not
    present there or in /etc/security/pam_env.conf. (should send to Debian).
  - debian/libpam0g.postinst: only ask questions during update-manager when
    there are non-default services running.
  - debian/patches-applied/series: Ubuntu patches are as below ...
  - debian/patches-applied/ubuntu-no-error-if-missingok: add a new, magic
    module option 'missingok' which will suppress logging of errors by
    libpam if the module is not found.
  - debian/patches-applied/ubuntu-regression_fix_securetty: prompt for
    password on bad username.
  - debian/patches-applied/ubuntu-rlimit_nice_correction: Explicitly
    initialise RLIMIT_NICE rather than relying on the kernel limits.
  - Change Vcs-Bzr to point at the Ubuntu branch.
  - debian/local/common-password, debian/pam-configs/unix: switch from
    "md5" to "sha512" as password crypt default.
  - Make libpam-modules depend on base-files (>= 5.0.0ubuntu6), to ensure
    run-parts does the right thing in /etc/update-motd.d.
  - debian/patches-applied/pam_motd-legal-notice: display the contents of
    /etc/legal once, then set a flag in the user's homedir to prevent showing
    it again.
  - debian/local/common-{auth,account,password}.md5sums: include the
    Ubuntu-specific intrepid,jaunty md5sums for use during the
    common-session-noninteractive upgrade.
* Dropped changes, superseded upstream:
  - debian/patches-applied/ubuntu-fix_standard_types: Use standard u_int8_t
    type rather than __u8.
  - debian/patches-applied/ubuntu-user_defined_environment: Look at
    ~/.pam_environment too, with the same format as
    /etc/security/pam_env.conf.

Show diffs side-by-side

added added

removed removed

Lines of Context:
doc/man/pam_sm_setcred.3.xml
62
62
        </listitem>
63
63
      </varlistentry>
64
64
      <varlistentry>
 
65
        <term>PAM_ESTABLISH_CRED</term>
 
66
        <listitem>
 
67
          <para>Initialize the credentials for the user.</para>
 
68
        </listitem>
 
69
      </varlistentry>
 
70
      <varlistentry>
65
71
        <term>PAM_DELETE_CRED</term>
66
72
        <listitem>
67
73
          <para>
87
93
      </varlistentry>
88
94
    </variablelist>
89
95
    <para>
90
 
      The way the <emphasis remap='B'>auth</emphasis> stack is 
 
96
      The way the <emphasis remap='B'>auth</emphasis> stack is
91
97
      navigated in order to evaluate the <function>pam_setcred</function>()
92
 
      function call, independent of the <function>pam_sm_setcred</function>() 
 
98
      function call, independent of the <function>pam_sm_setcred</function>()
93
99
      return codes, is exactly the same way that it was navigated when
94
100
      evaluating the <function>pam_authenticate</function>() library
95
101
      call. Typically, if a stack entry was ignored in evaluating
96
102
      <function>pam_authenticate</function>(), it will be ignored when
97
 
      libpam evaluates the <function>pam_setcred</function>() function 
98
 
      call. Otherwise, the return codes from each module specific 
 
103
      libpam evaluates the <function>pam_setcred</function>() function
 
104
      call. Otherwise, the return codes from each module specific
99
105
      <function>pam_sm_setcred</function>() call are treated as
100
106
      <emphasis remap='B'>required</emphasis>.
101
107
    </para>
146
152
      </varlistentry>
147
153
    </variablelist>
148
154
    <para>
149
 
      These, non-<emphasis>PAM_SUCCESS</emphasis>, return values will 
 
155
      These, non-<emphasis>PAM_SUCCESS</emphasis>, return values will
150
156
      typically lead to the credential stack <emphasis>failing</emphasis>.
151
 
      The first such error will dominate in the return value of 
 
157
      The first such error will dominate in the return value of
152
158
      <function>pam_setcred</function>().
153
159
    </para>
154
160
  </refsect1>