crypto/openssh/auth-pam.c

226 static pam_handle_t *sshpam_handle = NULL;
329 		if ((err = pam_putenv(sshpam_handle, env)) != PAM_SUCCESS) {
331 			    pam_strerror(sshpam_handle, sshpam_err));
442 	sshpam_err = pam_get_item(sshpam_handle, PAM_USER,
466 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
470 	sshpam_err = pam_authenticate(sshpam_handle, flags);
480 			sshpam_err = pam_chauthtok(sshpam_handle,
503 	env_from_pam = pam_getenvlist(sshpam_handle);
518 	    pam_strerror(sshpam_handle, sshpam_err));
602 	if (sshpam_handle == NULL || (use_privsep && !mm_is_monitor()))
605 	pam_set_item(sshpam_handle, PAM_CONV, (const void *)&null_conv);
608 		pam_close_session(sshpam_handle, PAM_SILENT);
613 		pam_setcred(sshpam_handle, PAM_DELETE_CRED);
617 	pam_end(sshpam_handle, sshpam_err);
618 	sshpam_handle = NULL;
628 	if (sshpam_handle != NULL) {
630 		sshpam_err = pam_get_item(sshpam_handle,
634 		pam_end(sshpam_handle, sshpam_err);
635 		sshpam_handle = NULL;
639 	    pam_start(SSHD_PAM_SERVICE, user, &store_conv, &sshpam_handle);
643 		pam_end(sshpam_handle, sshpam_err);
644 		sshpam_handle = NULL;
649 	sshpam_err = pam_set_item(sshpam_handle, PAM_RHOST, pam_rhost);
651 		pam_end(sshpam_handle, sshpam_err);
652 		sshpam_handle = NULL;
662 	sshpam_err = pam_set_item(sshpam_handle, PAM_TTY, "ssh");
664 		pam_end(sshpam_handle, sshpam_err);
665 		sshpam_handle = NULL;
763 			debug3("PAM: %s", pam_strerror(sshpam_handle, type));
907 	sshpam_err = pam_acct_mgmt(sshpam_handle, 0);
909 	    pam_strerror(sshpam_handle, sshpam_err));
928 		sshpam_err = pam_set_item(sshpam_handle, PAM_TTY, tty);
931 			    pam_strerror(sshpam_handle, sshpam_err));
938 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
942 		    pam_strerror(sshpam_handle, sshpam_err));
945 		sshpam_err = pam_setcred(sshpam_handle, PAM_ESTABLISH_CRED);
948 		sshpam_err = pam_setcred(sshpam_handle, PAM_REINITIALIZE_CRED);
956 		    pam_strerror(sshpam_handle, sshpam_err));
959 		    pam_strerror(sshpam_handle, sshpam_err));
1027 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
1031 		    pam_strerror(sshpam_handle, sshpam_err));
1033 	sshpam_err = pam_chauthtok(sshpam_handle, PAM_CHANGE_EXPIRED_AUTHTOK);
1036 		    pam_strerror(sshpam_handle, sshpam_err));
1043 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
1047 		    pam_strerror(sshpam_handle, sshpam_err));
1048 	sshpam_err = pam_open_session(sshpam_handle, 0);
1055 		    pam_strerror(sshpam_handle, sshpam_err));
1083 	ret = pam_putenv(sshpam_handle, compound);
1099 	return (pam_getenvlist(sshpam_handle));
1185 	if (!options.use_pam || sshpam_handle == NULL)
1201 	sshpam_err = pam_set_item(sshpam_handle, PAM_CONV,
1205 		    pam_strerror(sshpam_handle, sshpam_err));
1207 	sshpam_err = pam_authenticate(sshpam_handle, flags);
1216 		    pam_strerror(sshpam_handle, sshpam_err));