diff options
author | Daniel Baumann <daniel@debian.org> | 2024-10-18 20:33:49 +0200 |
---|---|---|
committer | Daniel Baumann <daniel@debian.org> | 2024-10-18 20:33:49 +0200 |
commit | dd136858f1ea40ad3c94191d647487fa4f31926c (patch) | |
tree | 58fec94a7b2a12510c9664b21793f1ed560c6518 /modules/auth/pam/pam.go | |
parent | Initial commit. (diff) | |
download | forgejo-ef5d5baef09ca06d3e8d67f7a39f7c57e6671b5b.tar.xz forgejo-ef5d5baef09ca06d3e8d67f7a39f7c57e6671b5b.zip |
Adding upstream version 9.0.0.HEADupstream/9.0.0upstreamdebian
Signed-off-by: Daniel Baumann <daniel@debian.org>
Diffstat (limited to '')
-rw-r--r-- | modules/auth/pam/pam.go | 43 |
1 files changed, 43 insertions, 0 deletions
diff --git a/modules/auth/pam/pam.go b/modules/auth/pam/pam.go new file mode 100644 index 0000000..cca1482 --- /dev/null +++ b/modules/auth/pam/pam.go @@ -0,0 +1,43 @@ +// Copyright 2014 The Gogs Authors. All rights reserved. +// SPDX-License-Identifier: MIT + +//go:build pam + +package pam + +import ( + "errors" + + "github.com/msteinert/pam" +) + +// Supported is true when built with PAM +var Supported = true + +// Auth pam auth service +func Auth(serviceName, userName, passwd string) (string, error) { + t, err := pam.StartFunc(serviceName, userName, func(s pam.Style, msg string) (string, error) { + switch s { + case pam.PromptEchoOff: + return passwd, nil + case pam.PromptEchoOn, pam.ErrorMsg, pam.TextInfo: + return "", nil + } + return "", errors.New("Unrecognized PAM message style") + }) + if err != nil { + return "", err + } + + if err = t.Authenticate(0); err != nil { + return "", err + } + + if err = t.AcctMgmt(0); err != nil { + return "", err + } + + // PAM login names might suffer transformations in the PAM stack. + // We should take whatever the PAM stack returns for it. + return t.GetItem(pam.User) +} |