src/lib/libtacplus/taclib.c, branch stable/13

libtacplus: Allow additional AV pairs to be configured.

2023-12-13T16:08:13+00:00

* Replace hand-rolled input tokenizer with openpam_readlinev() which supports line continuations and has better quoting and escaping.
* Simplify string handling by merging struct clnt_str and struct srvr_str into just struct tac_str.
* Each server entry in the configuration file can now have up to 255 AV pairs which will be appended to the ones returned by the server in response to a successful authorization request.

This allows nss_tacplus(8) to be used with servers which do not provide identity information beyond confirming the existence of the user.

This adds a dependency on libpam, however libtacplus is currently only used by pam_tacplus(8) (which is already always used with libpam) and the very recently added nss_tacplus(8) (which is extremely niche).  In the longer term it might be a good idea to split this out into a separate library.

MFC after:	1 week
Sponsored by:	Klara, Inc.
Reviewed by:	pauamma_gundo.com, markj
Differential Revision:	https://reviews.freebsd.org/D40285
Relnotes:	yes

(cherry picked from commit 21850106fdda5269bc881f0e62839dff3d9edf47)

Remove $FreeBSD$: one-line .c pattern

2023-08-23T17:43:26+00:00

Remove /^[\s*]*__FBSDID\("\$FreeBSD\$"\);?\s*\n/

Similar commit in main:
(cherry picked from commit 1d386b48a555)

spdx: The BSD-2-Clause-FreeBSD identifier is obsolete, drop -FreeBSD

2023-07-25T15:13:49+00:00

The SPDX folks have obsoleted the BSD-2-Clause-FreeBSD identifier. Catch
up to that fact and revert to their recommended match of BSD-2-Clause.

Discussed with:		pfg
MFC After:		3 days
Sponsored by:		Netflix

(cherry picked from commit 4d846d260e2b9a3d4d0a701462568268cbfe7a5b)

libtacplus: Remove bogus srandomdev+random

2019-12-13T05:11:34+00:00

Replace with arc4random.

TACAS+ is a 1993 Cisco extension to the 1984 TACAS.  Is this something we want
in base still?  The directory has been substantively unmaintained since 2002,
at least.

lib: further adoption of SPDX licensing ID tags.

2017-11-26T02:00:33+00:00

Mainly focus on files that use BSD 2-Clause license, however the tool I
was using mis-identified many licenses so this was mostly a manual - error
prone - task.

The Software Package Data Exchange (SPDX) group provides a specification
to make it easier for automated tools to detect and summarize well known
opensource licenses. We are gradually adopting the specification, noting
that the tags are considered only advisory and do not, in any way,
superceed or replace the license texts.

Correct comment typo.

2010-01-21T15:01:09+00:00

Add support for TACACS+ accounting to libtacplus(3).

2009-12-11T07:53:44+00:00

Submitted by:	Michael Pounov misho@aitbg.com
OKed by:	emaste

In tac_get_av_value() empty attributes should be handled like 0-length

2009-11-25T14:59:28+00:00

strings rather than unset strings.
Fix the present wrong behaviour.

Obtained from:	Sandvine Incorporated
Reviewed by:	emaste
Sponsored by:	Sandvine Incorporated
MFC:		1 week

Fix most cases where the address of an int is passed to a function expecting a

2005-02-14T17:42:58+00:00

socklen_t * argument.

Enhance TACACS+ library to fully support authorization requests in

2002-09-25T23:18:51+00:00

addition to existing authentication.  No change to the existing
APIs to preseve both binary and API compatibility, so I am not
inclined to bump the library version number unless someone thinks
this is necessary.

Submitted by:	Paul Fraley 
MFC after:	2 weeks