Platform_Mirocod

Платформа ЦРНП "Мирокод" для разработки проектов https://git.mirocod.ru

6543 3e5c844a77 fix pam authorization (#19040 An error occurred ) (#19047 An error occurred ) Backport #19040 An error occurred The PAM module has previously only checked the results of the authentication module. However, in normal PAM practice most users will expect account module authorization to also be checked. Without doing this check in almost every configuration expired accounts and accounts with expired passwords will still be able to login. This is likely to represent a significant gotcha in most configurations and cause most users configurations to be potentially insecure. Therefore we should add in the account authorization check. ## ⚠️ BREAKING ⚠️ Users of the PAM module who rely on account modules not being checked will need to change their PAM configuration. However, as it is likely that the vast majority of users of PAM will be expecting account authorization to be checked in addition to authentication we should make this breaking change to make the default behaviour correct for the majority. --- I suggest we backport this despite the BREAKING nature because of the surprising nature of this. Thanks to @ysf for bringing this to our attention. Co-authored-by: zeripath <art27@cantab.net> Co-authored-by: ysf <34326+ysf@users.noreply.github.com>		3 years ago
..
openid	…
pam	fix pam authorization (#19040 An error occurred ) (#19047 An error occurred )	3 years ago
webauthn	Support webauthn (#17957 An error occurred )	3 years ago