bughz/3proxy
1
0
Fork 0
mirror of https://github.com/3proxy/3proxy.git synced 2026-04-06 21:30:12 +08:00
Code Issues Actions 13 Packages Projects Releases Wiki Activity

fix(PamAuth): добавлен вызов pam_acct_mgmt(), исправлен pam_start() (#1203)

Browse Source 
Добавлен вызов pam_acct_mgmt() после pam_authenticate() для проверки
прав доступа на уровне PAM (HBAC, истечение пароля, блокировка учётки)
Исправлена передача реального username в pam_start() вместо '3proxy@'

---

Added pam_acct_mgmt() call after pam_authenticate() to enable PAM
account checks (HBAC, password expiration, account lockout).
Fixed pam_start() to pass actual username instead of hardcoded '3proxy@'
Tested with FreeIPA 4.12 + SSSD Rocky Linux 9
This commit is contained in:
BDBSAlive6one6 2026-04-02 15:06:21 +03:00 committed by GitHub
parent 1f92847a63
commit c7318a825c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/plugins/PamAuth/pamauth.c
View File

@ -92,7 +92,7 @@ static int pamfunc(struct clientparam *param)
pthread_mutex_lock(&pam_mutex); pthread_mutex_lock(&pam_mutex);
if (!pamh) if (!pamh)
{ {
retval = pam_start ((char *)service, "3proxy@" , &conv, &pamh); retval = pam_start ((char *)service, (char *)param->username, &conv, &pamh);
} }
if (retval == PAM_SUCCESS) if (retval == PAM_SUCCESS)
retval = pam_set_item (pamh, PAM_USER, param->username); retval = pam_set_item (pamh, PAM_USER, param->username);
@ -102,6 +102,8 @@ static int pamfunc(struct clientparam *param)
/*fprintf(stderr,"pam_set_item2 rc=%d\n",retval); */ /*fprintf(stderr,"pam_set_item2 rc=%d\n",retval); */
if (retval == PAM_SUCCESS) if (retval == PAM_SUCCESS)
retval = pam_authenticate (pamh, 0); retval = pam_authenticate (pamh, 0);
if (retval == PAM_SUCCESS)
retval = pam_acct_mgmt (pamh, 0);
/*fprintf(stderr,"pam_authenticate rc=%d\n",retval);*/ /*fprintf(stderr,"pam_authenticate rc=%d\n",retval);*/
if (retval == PAM_SUCCESS) { /*auth OK*/ rc=0; } if (retval == PAM_SUCCESS) { /*auth OK*/ rc=0; }