1/*- 2 * Copyright (c) 2002 Networks Associates Technology, Inc. 3 * All rights reserved. 4 * 5 * This software was developed for the FreeBSD Project by ThinkSec AS and 6 * NAI Labs, the Security Research Division of Network Associates, Inc. 7 * under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the 8 * DARPA CHATS research program. --- 17 unchanged lines hidden (view full) --- 26 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 27 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 28 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 29 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 30 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 31 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 32 * SUCH DAMAGE. 33 * |
34 * $P4: //depot/projects/openpam/lib/pam_chauthtok.c#10 $ |
35 */ 36 37#include <sys/param.h> 38 39#include <security/pam_appl.h> 40 41#include "openpam_impl.h" 42 --- 5 unchanged lines hidden (view full) --- 48 */ 49 50int 51pam_chauthtok(pam_handle_t *pamh, 52 int flags) 53{ 54 int pam_err; 55 |
56 if (flags & ~(PAM_SILENT|PAM_CHANGE_EXPIRED_AUTHTOK)) |
57 return (PAM_SYMBOL_ERR); 58 pam_err = openpam_dispatch(pamh, PAM_SM_CHAUTHTOK, 59 flags | PAM_PRELIM_CHECK); 60 if (pam_err == PAM_SUCCESS) 61 pam_err = openpam_dispatch(pamh, PAM_SM_CHAUTHTOK, 62 flags | PAM_UPDATE_AUTHTOK); 63 pam_set_item(pamh, PAM_OLDAUTHTOK, NULL); 64 pam_set_item(pamh, PAM_AUTHTOK, NULL); 65 return (pam_err); 66} 67 68/* 69 * Error codes: 70 * 71 * =openpam_dispatch 72 * =pam_sm_chauthtok 73 * !PAM_IGNORE 74 * PAM_SYMBOL_ERR 75 */ |
76 77/** 78 * The =pam_chauthtok function attempts to change the authentication token 79 * for the user associated with the pam context specified by the =pamh 80 * argument. 81 * 82 * The =flags argument is the binary or of zero or more of the following 83 * values: 84 * 85 * =PAM_SILENT 86 * Do not emit any messages. 87 * =PAM_CHANGE_EXPIRED_AUTHTOK 88 * Change only those authentication tokens that have expired. 89 */ |