feat(pam/nativemodel): Add native PAM interface support #314
Commits on Jun 26, 2024
-
pam: Use default log handler when pam.Silent is used and logging to file
In case we're logging to a file, we are not bothering PAM output, so let's continue using the default handler
-
pam: Move initialization of options for PAM in headless mode to share…
…d file These are used both by tests and actual PAM model, so expose this in a single place to be reused without repetitions
-
pam/authentication: Request stage change before starting authentication
We were managing this from model, but this happened also on error, so let's instead do the stage change only if authentication has been started
-
pam/integration-tests: Rename optional pw reset tape to be closer to …
…what it does The tape doesn't really reset the password, it only skips the request so rename it accordingly, so that we can add an actual test that accepts the request
-
pam/integration-tests: Rename test to make the outcome clearer
In this test we were switching to local broker, but that's not something that was explicitly stated so do it
-
pam/integration-tests: Move CLI tapes to a subfolder
We're going to add more types, so let's organize them better
-
pam/authentication: Handle new password check logic in a global place
This makes easier to handle the logic in other UIs without having them to keep track of the state or of the previous password themselves
-
pam: Add PAM native model implementation
It allows to work with any pam client, regardless they're supporting authd or not
-
pam/main-cli: Allow to enable simple conversation handler
It allows us to use more complex stacks where normal PAM input is required
-
services/permissions/testutils: Only consider the suffix of the user …
…error message When replacing the user ID with XXXX's we may not be able to replace the content fully when the string is wrapped. So just consider the final part of the string. See https://github.com/ubuntu/authd/actions/runs/9588429219/job/26440434186
-
pam/integration-tests: Add native PAM client integration tests
Reusing the same test cases of the CLI client, tuned to work with the simpler UI that PAM provides
-
pam/integration-tests: Run passwd_unexisting_user tape with CLI
We had this tape in the repository, but it wasn't used, so actually use it
-
pam/integration-tests: Add TestNativeChangeAuthTok tests
Repeat the tests we have for the CLI interface in the PAM native interface too
