1*0Sstevel@tonic-gate /*
2*0Sstevel@tonic-gate * CDDL HEADER START
3*0Sstevel@tonic-gate *
4*0Sstevel@tonic-gate * The contents of this file are subject to the terms of the
5*0Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only
6*0Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance
7*0Sstevel@tonic-gate * with the License.
8*0Sstevel@tonic-gate *
9*0Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10*0Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
11*0Sstevel@tonic-gate * See the License for the specific language governing permissions
12*0Sstevel@tonic-gate * and limitations under the License.
13*0Sstevel@tonic-gate *
14*0Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
15*0Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16*0Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
17*0Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
18*0Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
19*0Sstevel@tonic-gate *
20*0Sstevel@tonic-gate * CDDL HEADER END
21*0Sstevel@tonic-gate */
22*0Sstevel@tonic-gate /*
23*0Sstevel@tonic-gate * Copyright 2004 Sun Microsystems, Inc. All rights reserved.
24*0Sstevel@tonic-gate * Use is subject to license terms.
25*0Sstevel@tonic-gate */
26*0Sstevel@tonic-gate
27*0Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI"
28*0Sstevel@tonic-gate
29*0Sstevel@tonic-gate #include <strings.h>
30*0Sstevel@tonic-gate #include <syslog.h>
31*0Sstevel@tonic-gate
32*0Sstevel@tonic-gate #include <security/pam_appl.h>
33*0Sstevel@tonic-gate #include <security/pam_modules.h>
34*0Sstevel@tonic-gate
35*0Sstevel@tonic-gate /*
36*0Sstevel@tonic-gate * pam_deny - PAM service module that returns the default error code for
37*0Sstevel@tonic-gate * all service module types.
38*0Sstevel@tonic-gate *
39*0Sstevel@tonic-gate * Entry argv = debug, syslog call LOG_AUTH | LOG_DEBUG.
40*0Sstevel@tonic-gate *
41*0Sstevel@tonic-gate * Exit PAM_* appropriate for service module type.
42*0Sstevel@tonic-gate *
43*0Sstevel@tonic-gate * Uses PAM_USER, PAM_SERVICE
44*0Sstevel@tonic-gate */
45*0Sstevel@tonic-gate
46*0Sstevel@tonic-gate static void
debug(pam_handle_t * pamh,int flags,int argc,const char ** argv,char * mod)47*0Sstevel@tonic-gate debug(pam_handle_t *pamh, int flags, int argc, const char **argv, char *mod)
48*0Sstevel@tonic-gate {
49*0Sstevel@tonic-gate char *user;
50*0Sstevel@tonic-gate char *service;
51*0Sstevel@tonic-gate
52*0Sstevel@tonic-gate if (argc < 1 || strcmp(argv[0], "debug") != 0)
53*0Sstevel@tonic-gate return;
54*0Sstevel@tonic-gate
55*0Sstevel@tonic-gate (void) pam_get_item(pamh, PAM_SERVICE, (void **)&service);
56*0Sstevel@tonic-gate (void) pam_get_item(pamh, PAM_USER, (void **)&user);
57*0Sstevel@tonic-gate
58*0Sstevel@tonic-gate syslog(LOG_AUTH | LOG_DEBUG, "%s pam_deny:%s(%x) for %s",
59*0Sstevel@tonic-gate service ? service : "No Service Specified", mod, flags,
60*0Sstevel@tonic-gate user ? user : "No User Specified");
61*0Sstevel@tonic-gate }
62*0Sstevel@tonic-gate
63*0Sstevel@tonic-gate int
pam_sm_authenticate(pam_handle_t * pamh,int flags,int argc,const char ** argv)64*0Sstevel@tonic-gate pam_sm_authenticate(pam_handle_t *pamh, int flags, int argc, const char **argv)
65*0Sstevel@tonic-gate {
66*0Sstevel@tonic-gate debug(pamh, flags, argc, argv, "pam_sm_authenticate");
67*0Sstevel@tonic-gate return (PAM_AUTH_ERR);
68*0Sstevel@tonic-gate }
69*0Sstevel@tonic-gate
70*0Sstevel@tonic-gate int
pam_sm_setcred(pam_handle_t * pamh,int flags,int argc,const char ** argv)71*0Sstevel@tonic-gate pam_sm_setcred(pam_handle_t *pamh, int flags, int argc, const char **argv)
72*0Sstevel@tonic-gate {
73*0Sstevel@tonic-gate debug(pamh, flags, argc, argv, "pam_sm_setcred");
74*0Sstevel@tonic-gate return (PAM_CRED_ERR);
75*0Sstevel@tonic-gate }
76*0Sstevel@tonic-gate
77*0Sstevel@tonic-gate int
pam_sm_acct_mgmt(pam_handle_t * pamh,int flags,int argc,const char ** argv)78*0Sstevel@tonic-gate pam_sm_acct_mgmt(pam_handle_t *pamh, int flags, int argc, const char **argv)
79*0Sstevel@tonic-gate {
80*0Sstevel@tonic-gate debug(pamh, flags, argc, argv, "pam_sm_acct_mgmt");
81*0Sstevel@tonic-gate return (PAM_ACCT_EXPIRED);
82*0Sstevel@tonic-gate }
83*0Sstevel@tonic-gate
84*0Sstevel@tonic-gate int
pam_sm_open_session(pam_handle_t * pamh,int flags,int argc,const char ** argv)85*0Sstevel@tonic-gate pam_sm_open_session(pam_handle_t *pamh, int flags, int argc, const char **argv)
86*0Sstevel@tonic-gate {
87*0Sstevel@tonic-gate debug(pamh, flags, argc, argv, "pam_sm_open_session");
88*0Sstevel@tonic-gate return (PAM_SESSION_ERR);
89*0Sstevel@tonic-gate }
90*0Sstevel@tonic-gate
91*0Sstevel@tonic-gate int
pam_sm_close_session(pam_handle_t * pamh,int flags,int argc,const char ** argv)92*0Sstevel@tonic-gate pam_sm_close_session(pam_handle_t *pamh, int flags, int argc, const char **argv)
93*0Sstevel@tonic-gate {
94*0Sstevel@tonic-gate debug(pamh, flags, argc, argv, "pam_sm_close_session");
95*0Sstevel@tonic-gate return (PAM_SESSION_ERR);
96*0Sstevel@tonic-gate }
97*0Sstevel@tonic-gate
98*0Sstevel@tonic-gate int
pam_sm_chauthtok(pam_handle_t * pamh,int flags,int argc,const char ** argv)99*0Sstevel@tonic-gate pam_sm_chauthtok(pam_handle_t *pamh, int flags, int argc, const char **argv)
100*0Sstevel@tonic-gate {
101*0Sstevel@tonic-gate debug(pamh, flags, argc, argv, "pam_sm_chauthtok");
102*0Sstevel@tonic-gate return (PAM_AUTHTOK_ERR);
103*0Sstevel@tonic-gate }
104