crypto/openssh/auth-pam.c

233 static pam_handle_t *sshpam_handle = NULL;
336 		if ((err = pam_putenv(sshpam_handle, env)) != PAM_SUCCESS) {
338 			    pam_strerror(sshpam_handle, sshpam_err));
432 	sshpam_err = pam_get_item(sshpam_handle, PAM_USER,
456 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
460 	sshpam_err = pam_authenticate(sshpam_handle, flags);
472 			sshpam_err = pam_chauthtok(sshpam_handle,
495 	env_from_pam = pam_getenvlist(sshpam_handle);
510 	    pam_strerror(sshpam_handle, sshpam_err));
596 	if (sshpam_handle == NULL || (use_privsep && !mm_is_monitor()))
599 	pam_set_item(sshpam_handle, PAM_CONV, (const void *)&null_conv);
602 		pam_close_session(sshpam_handle, PAM_SILENT);
607 		pam_setcred(sshpam_handle, PAM_DELETE_CRED);
611 	pam_end(sshpam_handle, sshpam_err);
612 	sshpam_handle = NULL;
623 	if (sshpam_handle != NULL) {
625 		sshpam_err = pam_get_item(sshpam_handle,
629 		pam_end(sshpam_handle, sshpam_err);
630 		sshpam_handle = NULL;
634 	    pam_start(SSHD_PAM_SERVICE, user, &store_conv, &sshpam_handle);
638 		pam_end(sshpam_handle, sshpam_err);
639 		sshpam_handle = NULL;
644 	sshpam_err = pam_set_item(sshpam_handle, PAM_RHOST, pam_rhost);
646 		pam_end(sshpam_handle, sshpam_err);
647 		sshpam_handle = NULL;
657 	sshpam_err = pam_set_item(sshpam_handle, PAM_TTY, "ssh");
659 		pam_end(sshpam_handle, sshpam_err);
660 		sshpam_handle = NULL;
763 			debug3("PAM: %s", pam_strerror(sshpam_handle, type));
933 	sshpam_err = pam_acct_mgmt(sshpam_handle, 0);
935 	    pam_strerror(sshpam_handle, sshpam_err));
954 		sshpam_err = pam_set_item(sshpam_handle, PAM_TTY, tty);
957 			    pam_strerror(sshpam_handle, sshpam_err));
964 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
968 		    pam_strerror(sshpam_handle, sshpam_err));
971 		sshpam_err = pam_setcred(sshpam_handle, PAM_ESTABLISH_CRED);
974 		sshpam_err = pam_setcred(sshpam_handle, PAM_REINITIALIZE_CRED);
982 		    pam_strerror(sshpam_handle, sshpam_err));
985 		    pam_strerror(sshpam_handle, sshpam_err));
1053 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
1057 		    pam_strerror(sshpam_handle, sshpam_err));
1059 	sshpam_err = pam_chauthtok(sshpam_handle, PAM_CHANGE_EXPIRED_AUTHTOK);
1062 		    pam_strerror(sshpam_handle, sshpam_err));
1069 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
1073 		    pam_strerror(sshpam_handle, sshpam_err));
1074 	sshpam_err = pam_open_session(sshpam_handle, 0);
1081 		    pam_strerror(sshpam_handle, sshpam_err));
1109 	ret = pam_putenv(sshpam_handle, compound);
1125 	return (pam_getenvlist(sshpam_handle));
1212 	if (!options.use_pam || sshpam_handle == NULL)
1228 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
1232 		    pam_strerror(sshpam_handle, sshpam_err));
1234 	sshpam_err = pam_authenticate(sshpam_handle, flags);
1246 		    pam_strerror(sshpam_handle, sshpam_err));