From 84676ab4a6a4821e8dbd8c340216b68c24aeeea7 Mon Sep 17 00:00:00 2001 From: Arthur de Jong Date: Sat, 21 Jul 2018 16:13:23 +0200 Subject: Add domain variable for use in pam_authz_search This adds a domain variable (if it can be determined on the system) that can be used in pam_authz_search and pam_authc_search filters to build search filters that search on the domain name (the FQDN without the starting host name). Closes https://github.com/arthurdejong/nss-pam-ldapd/issues/8 --- nslcd/pam.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) (limited to 'nslcd/pam.c') diff --git a/nslcd/pam.c b/nslcd/pam.c index 7772959..2132107 100644 --- a/nslcd/pam.c +++ b/nslcd/pam.c @@ -2,7 +2,7 @@ pam.c - pam processing routines Copyright (C) 2009 Howard Chu - Copyright (C) 2009-2017 Arthur de Jong + Copyright (C) 2009-2018 Arthur de Jong Copyright (C) 2015 Nokia Solutions and Networks This library is free software; you can redistribute it and/or @@ -71,7 +71,7 @@ static DICT *search_vars_new(const char *dn, const char *username, char hostname[BUFLEN_HOSTNAME]; /* allocating this on the stack is OK because search_var_add() will allocate new memory for the value */ - const char *fqdn; + const char *fqdn, *found; DICT *dict; dict = dict_new(); if (dict == NULL) @@ -89,7 +89,11 @@ static DICT *search_vars_new(const char *dn, const char *username, if (gethostname(hostname, sizeof(hostname)) == 0) search_var_add(dict, "hostname", hostname); if ((fqdn = getfqdn()) != NULL) + { search_var_add(dict, "fqdn", fqdn); + if (((found = strchr(fqdn, '.'))) != NULL && (found[1] != '\0')) + search_var_add(dict, "domain", found + 1); + } search_var_add(dict, "dn", dn); search_var_add(dict, "uid", username); return dict; -- cgit v1.2.3