8 Commits

Author SHA1 Message Date
Andrew McMillan
7e0b88ed77 Decruftify, and allow the squid pam to use 'path' instead of 'script' in it's config. 2011-09-08 11:34:52 +12:00
Andrew McMillan
20ee255898 Refactor fetching of Principal records from database.
This is a significant refactoring, replacing the old getUserBy*()
functions with a new Principal class, and replacing the old
CalDAVPrincipal class with a new DAVPrincipal class which extends
the Principal class.

At this point all regression tests pass (again) but there could
well be issues for people who use alternative authenticators
such as LDAP, although I have endeavoured to resolve those
potential issues.

Signed-off-by: Andrew McMillan <andrew@morphoss.com>
2011-01-03 10:16:43 +13:00
Jim Hague
9469eb6d58 PAM - get user name from a comma-less passwd comment field.
PAM authentication uses a regular expression to extract the user's real
name from the 'user name or comment field' passwd file when creating a
new account.

The current regular expression assumes the comment field contains the
user name followed by a comma and some other comma-delimited information
(the Linux 'adduser' command adds room number, work phone, home phone
and 'other' info given half a chance).

If the field just contains the user name, there is no trailing comma
and the RE match fails. Make the trailing comma optional.

Signed-off-by: Andrew McMillan <andrew@morphoss.com>
2010-09-17 14:06:23 +12:00
Andrew McMillan
50ddbe6272 Debugged version of last fix. for Debian bug #561288. 2009-12-17 08:49:39 +13:00
Andrew McMillan
026c719251 Better use of getent to extract user fullname. 2009-12-16 22:57:45 +13:00
Matthias Mohr
526d4dce6f Translatability improvements from Matthias Mohr. 2009-10-30 09:00:41 +13:00
Andrew McMillan
6ac9985fba Add rudimentary munging of usernames etc. for better security. 2008-11-10 11:50:24 +13:00
Andrew McMillan
786e73f56b Authentication against PAM via Squid helper by Eric Seigne. 2007-11-06 14:52:13 +13:00