crypto/openssh/auth-pam.c

234 static int sshpam_err = 0;
338 			    pam_strerror(sshpam_handle, sshpam_err));
432 	sshpam_err = pam_get_item(sshpam_handle, PAM_USER,
434 	if (sshpam_err != PAM_SUCCESS)
456 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
458 	if (sshpam_err != PAM_SUCCESS)
460 	sshpam_err = pam_authenticate(sshpam_handle, flags);
461 	if (sshpam_err == PAM_MAXTRIES)
463 	if (sshpam_err != PAM_SUCCESS)
468 			sshpam_err = PAM_ACCT_EXPIRED;
472 			sshpam_err = pam_chauthtok(sshpam_handle,
474 			if (sshpam_err != PAM_SUCCESS)
504 	ssh_msg_send(ctxt->pam_csock, sshpam_err, &buffer);
510 	    pam_strerror(sshpam_handle, sshpam_err));
512 	if (sshpam_err == PAM_ACCT_EXPIRED)
611 	pam_end(sshpam_handle, sshpam_err);
625 		sshpam_err = pam_get_item(sshpam_handle,
627 		if (sshpam_err == PAM_SUCCESS && strcmp(user, pam_user) == 0)
629 		pam_end(sshpam_handle, sshpam_err);
633 	sshpam_err =
637 	if (sshpam_err != PAM_SUCCESS) {
638 		pam_end(sshpam_handle, sshpam_err);
644 	sshpam_err = pam_set_item(sshpam_handle, PAM_RHOST, pam_rhost);
645 	if (sshpam_err != PAM_SUCCESS) {
646 		pam_end(sshpam_handle, sshpam_err);
657 	sshpam_err = pam_set_item(sshpam_handle, PAM_TTY, "ssh");
658 	if (sshpam_err != PAM_SUCCESS) {
659 		pam_end(sshpam_handle, sshpam_err);
933 	sshpam_err = pam_acct_mgmt(sshpam_handle, 0);
934 	debug3("PAM: %s pam_acct_mgmt = %d (%s)", __func__, sshpam_err,
935 	    pam_strerror(sshpam_handle, sshpam_err));
937 	if (sshpam_err != PAM_SUCCESS && sshpam_err != PAM_NEW_AUTHTOK_REQD) {
942 	if (sshpam_err == PAM_NEW_AUTHTOK_REQD)
954 		sshpam_err = pam_set_item(sshpam_handle, PAM_TTY, tty);
955 		if (sshpam_err != PAM_SUCCESS)
957 			    pam_strerror(sshpam_handle, sshpam_err));
964 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
966 	if (sshpam_err != PAM_SUCCESS)
968 		    pam_strerror(sshpam_handle, sshpam_err));
971 		sshpam_err = pam_setcred(sshpam_handle, PAM_ESTABLISH_CRED);
974 		sshpam_err = pam_setcred(sshpam_handle, PAM_REINITIALIZE_CRED);
976 	if (sshpam_err == PAM_SUCCESS) {
982 		    pam_strerror(sshpam_handle, sshpam_err));
985 		    pam_strerror(sshpam_handle, sshpam_err));
1053 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
1055 	if (sshpam_err != PAM_SUCCESS)
1057 		    pam_strerror(sshpam_handle, sshpam_err));
1059 	sshpam_err = pam_chauthtok(sshpam_handle, PAM_CHANGE_EXPIRED_AUTHTOK);
1060 	if (sshpam_err != PAM_SUCCESS)
1062 		    pam_strerror(sshpam_handle, sshpam_err));
1069 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
1071 	if (sshpam_err != PAM_SUCCESS)
1073 		    pam_strerror(sshpam_handle, sshpam_err));
1074 	sshpam_err = pam_open_session(sshpam_handle, 0);
1075 	if (sshpam_err == PAM_SUCCESS)
1081 		    pam_strerror(sshpam_handle, sshpam_err));
1228 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
1230 	if (sshpam_err != PAM_SUCCESS)
1232 		    pam_strerror(sshpam_handle, sshpam_err));
1234 	sshpam_err = pam_authenticate(sshpam_handle, flags);
1237 	if (sshpam_err == PAM_MAXTRIES)
1239 	if (sshpam_err == PAM_SUCCESS && authctxt->valid) {
1246 		    pam_strerror(sshpam_handle, sshpam_err));