]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
PAM: support the authentication facility
authorVal Packett <val@packett.cool>
Thu, 27 Apr 2023 16:49:03 +0000 (13:49 -0300)
committerGitHub <noreply@github.com>
Thu, 27 Apr 2023 16:49:03 +0000 (09:49 -0700)
commitae0d0f0e047edc0da20f9dcf28d161e31a259751
tree00387e4be6c775f097732f43f455d6a21fde2b63
parentee728008a4279dbbbe5332f8b9a886f3b8d91e00
PAM: support the authentication facility

Implement the pam_sm_authenticate method, using the noop argument of
lzc_load_key to do a passphrase check without actually loading the key.

This allows using ZFS as the source of truth for user passwords,
without storing any password hashes in /etc or using other PAM modules.

Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Reviewed-by: Felix Dörre <felix@dogcraft.de>
Signed-off-by: Val Packett <val@packett.cool>
Closes #14789
contrib/pam_zfs_key/pam_zfs_key.c