RubyGems - pam - Versions diffs - 1.5.2 - Mend

pam 1.5.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (14) hide show

data/test/check_get_item.rb ADDED Viewed

@@ -0,0 +1,47 @@
+# -*- ruby -*-
+# $Id: check_get_item.rb,v 1.1.1.1 2002/11/06 08:04:49 ttate Exp $
+require "pam"
+def pam_conv(msgs, data)
+  ret = []
+  msgs.each{|msg|
+    case msg.msg_style
+    when PAM::PAM_PROMPT_ECHO_ON
+      printf("User: ")
+      if( user = $stdin.gets )
+	user.chomp!
+      end
+      ret.push(PAM::Response.new(user,0))
+    when PAM::PAM_PROMPT_ECHO_OFF
+      printf("Password: ")
+      `stty -echo`
+      begin
+	if( pass = $stdin.gets )
+	  pass.chomp!
+	end
+      ensure
+	`stty echo`
+      end
+      ret.push(PAM::Response.new(pass, 0))
+    else
+      ret.push(PAM::Response.new(nil, 0))
+    end
+  }
+  ret
+end
+conv = proc{|msg| pam_conv(msg)}
+user = ENV['LOGNAME']
+data = user
+PAM.start("check_user",user,conv,data){|pam|
+  conv2,data2 = pam.get_item(PAM::PAM_CONV)
+  if( conv == conv2 && data == data2 )
+    print("ok\n")
+  else
+    print("error\n")
+  end
+}

data/test/check_user.rb ADDED Viewed

@@ -0,0 +1,114 @@
+# -*- ruby -*-
+# $Id: check_user.rb,v 1.1.1.1 2002/11/06 08:04:49 ttate Exp $
+=begin
+You need to create the /etc/pam.d/check_user file which
+contains the following in the /etc/pam.d directory.
+--
+auth       required     /lib/security/pam_pwdb.so shadow nullok
+account    required     /lib/security/pam_pwdb.so
+password   required     /lib/security/pam_cracklib.so
+password   required     /lib/security/pam_pwdb.so shadow use_authtok nullok
+session    required     /lib/security/pam_pwdb.so
+session    optional     /lib/security/pam_xauth.so
+--
+Or you need to add the following to the /etc/pam.conf file.
+--
+check_user auth      required /lib/security/pam_pwdb.so shadow nullok
+check_user account   required /lib/security/pam_pwdb.so
+check_user password  required /lib/security/pam_cracklib.so
+check_user password  required /lib/security/pam_pwdb.so shadow use_authtok nullok
+check_user session   required /lib/security/pam_pwdb.so
+check_user session   optional /lib/security/pam_xauth.so
+--
+See also the PAM administration guide depended on your OS.
+=end
+require "pam"
+def pam_conv(msgs, data)
+  ret = []
+  print("pam_conv: data = #{data.inspect}\n")
+  print("pam_conv: msgs = #{msgs.inspect}\n")
+  msgs.each{|msg|
+    case msg.msg_style
+    when PAM::PAM_PROMPT_ECHO_ON
+      printf(msg.msg)
+      if( str = $stdin.gets )
+	user.chomp!
+      end
+      ret.push(PAM::Response.new(str,0))
+    when PAM::PAM_PROMPT_ECHO_OFF
+      printf(msg.msg)
+      `stty -echo`
+      begin
+	if( str = $stdin.gets )
+	  str.chomp!
+	end
+      ensure
+	`stty echo`
+      end
+      ret.push(PAM::Response.new(str, 0))
+    else
+      # unexpected, bug?
+      ret.push(PAM::Response.new(nil, 0))
+    end
+  }
+  ret
+end
+if( ARGV[0] && ARGV[1] )
+  service = ARGV[0]
+  user    = ARGV[1]
+else
+  print("usage:\n #{$0} <service> <user>\n")
+  exit(1)
+end
+conv = proc{|msg, data| pam_conv(msg, data)}
+conv_data = ""
+PAM.start("check_user", user, conv, conv_data){|pam|
+#PAM.start(service, user, :pam_conv, conv_data){|pam|
+  #pam.set_fail_delay(0)
+  #pam.set_item(PAM::PAM_RUSER, "bkearney")
+  #pam.set_item(PAM::PAM_RHOST, rhost)
+  #pam.set_item(PAM::PAM_CONV, [conv, conv_data])
+  #pam.set_item(PAM::PAM_TTY, "1")
+  print("PAM_RUSER   = ", pam.get_item(PAM::PAM_RUSER), "\n")
+  print("PAM_RHOST   = ", pam.get_item(PAM::PAM_RHOST), "\n")
+  print("PAM_USER    = ", pam.get_item(PAM::PAM_USER), "\n")
+  print("PAM_SERVICE = ", pam.get_item(PAM::PAM_SERVICE), "\n")
+  print("PAM_CONV    = ", pam.get_item(PAM::PAM_CONV).inspect, "\n")
+  begin
+    pam.authenticate(0)
+  rescue PAM::PAM_USER_UNKNOWN
+    print("unknown user: #{pam.get_item(PAM::PAM_USER)}")
+    exit(1)
+  rescue PAM::PAM_AUTH_ERR
+    print("authentication error: #{pam.get_item(PAM::PAM_USER)}\n")
+    print("error code = #{pam.status}\n")
+    exit(1)
+  rescue PAM::PAMError
+    print("error code = #{pam.status}\n")
+    exit(1)
+  end
+  begin
+    #pam.acct_mgmt(0)
+    #pam.open_session{
+    #  # do something
+    #}
+  rescue PAM::PAMError
+    printf("you can't access.\n")
+    exit(1)
+  end
+  print("\n",
+	"authenticated!\n")
+}

metadata ADDED Viewed

@@ -0,0 +1,58 @@
+--- !ruby/object:Gem::Specification
+rubygems_version: 0.9.4
+specification_version: 1
+name: pam
+version: !ruby/object:Gem::Version
+  version: 1.5.2
+date: 2008-09-12 00:00:00 -04:00
+summary: Ruby bindings for pam
+require_paths:
+- lib
+email: bkearney@redhat.com
+homepage: http://sourceforge.net/projects/ruby-pam
+rubyforge_project:
+description: Ruby bindings pam.
+autorequire: pam-devel
+default_executable:
+bindir: bin
+has_rdoc: false
+required_ruby_version: !ruby/object:Gem::Version::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 1.8.1
+  version:
+platform: ruby
+signing_key:
+cert_chain:
+post_install_message:
+authors: []
+files:
+- Rakefile
+- COPYING
+- LICENSE
+- README
+- ChangeLog
+- ext/pam_handle.c
+- ext/pam.c
+- ext/pam.h
+- ext/extconf.rb
+- test/check_get_item.rb
+- test/check_conv.rb
+- test/check_user.rb
+- MANIFEST
+test_files: []
+rdoc_options: []
+extra_rdoc_files: []
+executables: []
+extensions:
+- ext/extconf.rb
+requirements: []
+dependencies: []