contrib/pam_passwdqc/pam_passwdqc.c

173 static int logaudit(pam_handle_t *pamh, int status, passwdqc_params_t *params)  in logaudit()  argument
176 	if (!(params->pam.flags & F_NO_AUDIT)) {  in logaudit()
184 	passwdqc_params_free(params);  in logaudit()
305 	passwdqc_params_t params;  local
317 	passwdqc_params_reset(&params);
318 	if (passwdqc_params_parse(&params, &parse_reason, argc, argv)) {
329 		if (params.pam.flags & F_ASK_OLDAUTHTOK_PRELIM)
332 		if (params.pam.flags & F_ASK_OLDAUTHTOK_UPDATE)
335 		passwdqc_params_free(&params);
353 			return logaudit(pamh, status, &params);
357 		passwdqc_params_free(&params);
363 		return logaudit(pamh, status, &params);
368 		return logaudit(pamh, status, &params);
371 	if (params.pam.flags & F_NON_UNIX) {
385 			return logaudit(pamh, PAM_USER_UNKNOWN, &params);
386 		if ((params.pam.flags & F_CHECK_OLDAUTHTOK) && !am_root(pamh)
391 			return logaudit(pamh, status, &params);
394 	randomonly = params.qc.min[4] > params.qc.max;
397 		enforce = params.pam.flags & F_ENFORCE_ROOT;
399 		enforce = params.pam.flags & F_ENFORCE_USERS;
401 	if (params.pam.flags & F_USE_AUTHTOK) {
404 			return logaudit(pamh, status, &params);
407 		    (check_max(&params.qc, pamh, newpass) && enforce))
408 			return logaudit(pamh, PAM_AUTHTOK_ERR, &params);
410 		    passwdqc_check(&params.qc, newpass, oldpass, pw);
417 		return logaudit(pamh, status, &params);
420 	retries_left = params.pam.retry;
426 	    params.qc.passphrase_words && params.qc.min[2] <= params.qc.max)
431 		return logaudit(pamh, status, &params);
433 	if (!randomonly && params.qc.min[0] == params.qc.min[4])
435 		    MESSAGE_EXPLAIN_PASSWORD_1_CLASS(params.qc.min[4]));
437 	else if (!randomonly && params.qc.min[3] == params.qc.min[4])
439 		    MESSAGE_EXPLAIN_PASSWORD_N_CLASSES(params.qc.min[4]),
440 		    params.qc.min[1] != params.qc.min[3] ? 3 : 2);
441 	else if (!randomonly && params.qc.min[3] == INT_MAX)
443 		    MESSAGE_EXPLAIN_PASSWORD_ALL_CLASSES(params.qc.min[4]));
446 		    MESSAGE_EXPLAIN_PASSWORD_ALL_OR_3_CLASSES(params.qc.min[4]),
447 		    params.qc.min[3]);
450 		return logaudit(pamh, status, &params);
453 	    params.qc.passphrase_words && params.qc.min[2] <= params.qc.max) {
455 		    MESSAGE_EXPLAIN_PASSPHRASE(params.qc.passphrase_words),
456 		    params.qc.min[2], params.qc.max);
458 			return logaudit(pamh, status, &params);
461 	randompass = passwdqc_random(&params.qc);
472 		return logaudit(pamh, PAM_AUTHTOK_ERR, &params);
482 		return logaudit(pamh, status, &params);
492 		return logaudit(pamh, PAM_AUTHTOK_ERR, &params);
495 	if (check_max(&params.qc, pamh, trypass) && enforce) {
504 	     (check_reason = passwdqc_check(&params.qc, trypass, oldpass, pw)))) {
549 	return logaudit(pamh, status, &params);