Add meson build

This adds the meson build files to be able to use meson instead of
autotools.

Tested: builds as expected, able to change password and log in.

Change-Id: I834b2fe205c3b79086b7a55e4b

Add meson build

This adds the meson build files to be able to use meson instead of
autotools.

Tested: builds as expected, able to change password and log in.

Change-Id: I834b2fe205c3b79086b7a55e4b7bcc39efa8a95e
Signed-off-by: Vernon Mauery <vernon.mauery@linux.intel.com>

show more ...

Fixes for warnings

Migrating to meson compiles with more warnings enabled. This change
fixes those warnings. Most were signedness differences.

Tested: compiles with no errors
able to log in

Fixes for warnings

Migrating to meson compiles with more warnings enabled. This change
fixes those warnings. Most were signedness differences.

Tested: compiles with no errors
able to log in over ipmi and change password

Signed-off-by: Vernon Mauery <vernon.mauery@linux.intel.com>
Change-Id: Iae8ac6a5797919f52d61fbf546738094e57dc2ee

show more ...

clang-format: copy latest and re-format

clang-format-16 has some backwards incompatible changes that require
additional settings for best compatibility and re-running the formatter.
Copy the latest

clang-format: copy latest and re-format

clang-format-16 has some backwards incompatible changes that require
additional settings for best compatibility and re-running the formatter.
Copy the latest .clang-format from the docs repository and reformat the
repository.

Change-Id: I67a8e53501042adf9b23a7f48e201d079aff5d69
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>

show more ...

Add console error message for pam-ipmicheck

When changing the password of an IPMI user with passwd command, if a
invalid password is provided, it only gives the default error message.
This patch add

Add console error message for pam-ipmicheck

When changing the password of an IPMI user with passwd command, if a
invalid password is provided, it only gives the default error message.
This patch adds a detailed error message for interactive console in
pam-ipmicheck.

Tested:
Set a 22-char password for an ipmi user with passwd command, it prints:
"Username 4 / Password 22 exceeds IPMI 16/20 limit"

Change-Id: I1267939ae3cdee81e3efad7d6ec45f572bd83f3d
Signed-off-by: Jiaqing Zhao <jiaqing.zhao@intel.com>

show more ...

Improve exceed length limit error message

The error message printed when username or password length exceeds the
limit uses a hex value without 0x prefix, which is really confusing in
some cases. Th

Improve exceed length limit error message

The error message printed when username or password length exceeds the
limit uses a hex value without 0x prefix, which is really confusing in
some cases. This patch changes them to decimal format. Also use removes
extra strlen calls as they are of O(1) complexity.

Tested:
Update an ipmi user with a 22-char password, 22 is logged instead of 16

Change-Id: Idec08d920c6377d4db9af7dd616c73f618a1e839
Signed-off-by: Jiaqing Zhao <jiaqing.zhao@intel.com>

show more ...

Return PAM_AUTHTOK_ERR when length exceeds limit

Currently, when the length of username or password exceeds IPMI limit,
it returns PAM_NEW_AUTHTOK_REQD. But according to the man page of
pam_sm_chaut

Return PAM_AUTHTOK_ERR when length exceeds limit

Currently, when the length of username or password exceeds IPMI limit,
it returns PAM_NEW_AUTHTOK_REQD. But according to the man page of
pam_sm_chauthtok, PAM_NEW_AUTHTOK_REQD is not a vaild return value.
Return PAM_AUTHTOK_ERR instead.

Tested:
Try updating a user in ipmi group with a 21-char password by calling
pam_chauthtok, PAM_AUTHTOK_ERR is returned.

Change-Id: Ia055f253865e9f4174dcbee8eec87917b7612f94
Signed-off-by: Jiaqing Zhao <jiaqing.zhao@intel.com>

show more ...

PAM-IPMI module - stores special users password

Special group('ipmi') user's passwords are stored
by pam_ipmicheck and pam_ipmisave module.
pam_ipmicheck will check password restrictions
for the spe

PAM-IPMI module - stores special users password

Special group('ipmi') user's passwords are stored
by pam_ipmicheck and pam_ipmisave module.
pam_ipmicheck will check password restrictions
for the special group user and pam_ipmisave
will update the password in special password
file in encrypted form.
Note: These modules still needs pam_unix support
to store the hashed password and work along
with pam_unix in stacked module concept

Change-Id: Id959107cae1819ff622e5993cd276075bcb92d2a
Signed-off-by: Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com>

show more ...