xref: /freebsd/contrib/openpam/lib/libpam/openpam_constants.c (revision 45538173c120eadca115fd7e56c657905bf73771)

/*-
 * Copyright (c) 2001-2003 Networks Associates Technology, Inc.
 * Copyright (c) 2004-2025 Dag-Erling Smørgrav
 * All rights reserved.
 *
 * This software was developed for the FreeBSD Project by ThinkSec AS and
 * Network Associates Laboratories, the Security Research Division of
 * Network Associates, Inc.  under DARPA/SPAWAR contract N66001-01-C-8035
 * ("CBOSS"), as part of the DARPA CHATS research program.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. The name of the author may not be used to endorse or promote
 *    products derived from this software without specific prior written
 *    permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#ifdef HAVE_CONFIG_H
# include "config.h"
#endif

#include <security/pam_appl.h>

#include "openpam_impl.h"

const char *pam_err_name[PAM_NUM_ERRORS] = {
	[PAM_SUCCESS]			 = "PAM_SUCCESS",
	[PAM_OPEN_ERR]			 = "PAM_OPEN_ERR",
	[PAM_SYMBOL_ERR]		 = "PAM_SYMBOL_ERR",
	[PAM_SERVICE_ERR]		 = "PAM_SERVICE_ERR",
	[PAM_SYSTEM_ERR]		 = "PAM_SYSTEM_ERR",
	[PAM_BUF_ERR]			 = "PAM_BUF_ERR",
	[PAM_CONV_ERR]			 = "PAM_CONV_ERR",
	[PAM_PERM_DENIED]		 = "PAM_PERM_DENIED",
	[PAM_MAXTRIES]			 = "PAM_MAXTRIES",
	[PAM_AUTH_ERR]			 = "PAM_AUTH_ERR",
	[PAM_NEW_AUTHTOK_REQD]		 = "PAM_NEW_AUTHTOK_REQD",
	[PAM_CRED_INSUFFICIENT]		 = "PAM_CRED_INSUFFICIENT",
	[PAM_AUTHINFO_UNAVAIL]		 = "PAM_AUTHINFO_UNAVAIL",
	[PAM_USER_UNKNOWN]		 = "PAM_USER_UNKNOWN",
	[PAM_CRED_UNAVAIL]		 = "PAM_CRED_UNAVAIL",
	[PAM_CRED_EXPIRED]		 = "PAM_CRED_EXPIRED",
	[PAM_CRED_ERR]			 = "PAM_CRED_ERR",
	[PAM_ACCT_EXPIRED]		 = "PAM_ACCT_EXPIRED",
	[PAM_AUTHTOK_EXPIRED]		 = "PAM_AUTHTOK_EXPIRED",
	[PAM_SESSION_ERR]		 = "PAM_SESSION_ERR",
	[PAM_AUTHTOK_ERR]		 = "PAM_AUTHTOK_ERR",
	[PAM_AUTHTOK_RECOVERY_ERR]	 = "PAM_AUTHTOK_RECOVERY_ERR",
	[PAM_AUTHTOK_LOCK_BUSY]		 = "PAM_AUTHTOK_LOCK_BUSY",
	[PAM_AUTHTOK_DISABLE_AGING]	 = "PAM_AUTHTOK_DISABLE_AGING",
	[PAM_NO_MODULE_DATA]		 = "PAM_NO_MODULE_DATA",
	[PAM_IGNORE]			 = "PAM_IGNORE",
	[PAM_ABORT]			 = "PAM_ABORT",
	[PAM_TRY_AGAIN]			 = "PAM_TRY_AGAIN",
	[PAM_MODULE_UNKNOWN]		 = "PAM_MODULE_UNKNOWN",
	[PAM_DOMAIN_UNKNOWN]		 = "PAM_DOMAIN_UNKNOWN",
	[PAM_BAD_HANDLE]		 = "PAM_BAD_HANDLE",
	[PAM_BAD_ITEM]			 = "PAM_BAD_ITEM",
	[PAM_BAD_FEATURE]		 = "PAM_BAD_FEATURE",
	[PAM_BAD_CONSTANT]		 = "PAM_BAD_CONSTANT",
};

const char *pam_err_text[PAM_NUM_ERRORS] = {
	[PAM_SUCCESS]			 = "Success",
	[PAM_OPEN_ERR]			 = "Failed to load module",
	[PAM_SYMBOL_ERR]		 = "Invalid symbol",
	[PAM_SERVICE_ERR]		 = "Error in service module",
	[PAM_SYSTEM_ERR]		 = "System error",
	[PAM_BUF_ERR]			 = "Memory buffer error",
	[PAM_CONV_ERR]			 = "Conversation failure",
	[PAM_PERM_DENIED]		 = "Permission denied",
	[PAM_MAXTRIES]			 = "Maximum number of tries exceeded",
	[PAM_AUTH_ERR]			 = "Authentication error",
	[PAM_NEW_AUTHTOK_REQD]		 = "New authentication token required",
	[PAM_CRED_INSUFFICIENT]		 = "Insufficient credentials",
	[PAM_AUTHINFO_UNAVAIL]		 = "Authentication information is unavailable",
	[PAM_USER_UNKNOWN]		 = "Unknown user",
	[PAM_CRED_UNAVAIL]		 = "Failed to retrieve user credentials",
	[PAM_CRED_EXPIRED]		 = "User credentials have expired",
	[PAM_CRED_ERR]			 = "Failed to set user credentials",
	[PAM_ACCT_EXPIRED]		 = "User account has expired",
	[PAM_AUTHTOK_EXPIRED]		 = "Password has expired",
	[PAM_SESSION_ERR]		 = "Session failure",
	[PAM_AUTHTOK_ERR]		 = "Authentication token failure",
	[PAM_AUTHTOK_RECOVERY_ERR]	 = "Failed to recover old authentication token",
	[PAM_AUTHTOK_LOCK_BUSY]		 = "Authentication token lock busy",
	[PAM_AUTHTOK_DISABLE_AGING]	 = "Authentication token aging disabled",
	[PAM_NO_MODULE_DATA]		 = "Module data not found",
	[PAM_IGNORE]			 = "Ignore this module",
	[PAM_ABORT]			 = "General failure",
	[PAM_TRY_AGAIN]			 = "Try again",
	[PAM_MODULE_UNKNOWN]		 = "Unknown module type",
	[PAM_DOMAIN_UNKNOWN]		 = "Unknown authentication domain",
	[PAM_BAD_HANDLE]		 = "Invalid PAM handle",
	[PAM_BAD_ITEM]			 = "Unrecognized or restricted item",
	[PAM_BAD_FEATURE]		 = "Unrecognized or restricted feature",
	[PAM_BAD_CONSTANT]		 = "Invalid constant",
};

const char *pam_item_name[PAM_NUM_ITEMS] = {
	[PAM_SERVICE]		 = "PAM_SERVICE",
	[PAM_USER]		 = "PAM_USER",
	[PAM_TTY]		 = "PAM_TTY",
	[PAM_RHOST]		 = "PAM_RHOST",
	[PAM_CONV]		 = "PAM_CONV",
	[PAM_AUTHTOK]		 = "PAM_AUTHTOK",
	[PAM_OLDAUTHTOK]	 = "PAM_OLDAUTHTOK",
	[PAM_RUSER]		 = "PAM_RUSER",
	[PAM_USER_PROMPT]	 = "PAM_USER_PROMPT",
	[PAM_REPOSITORY]	 = "PAM_REPOSITORY",
	[PAM_AUTHTOK_PROMPT]	 = "PAM_AUTHTOK_PROMPT",
	[PAM_OLDAUTHTOK_PROMPT]	 = "PAM_OLDAUTHTOK_PROMPT",
	[PAM_HOST]		 = "PAM_HOST",
};

const char *pam_facility_name[PAM_NUM_FACILITIES] = {
	[PAM_ACCOUNT]		 = "account",
	[PAM_AUTH]		 = "auth",
	[PAM_PASSWORD]		 = "password",
	[PAM_SESSION]		 = "session",
};

const char *pam_control_flag_name[PAM_NUM_CONTROL_FLAGS] = {
	[PAM_BINDING]		 = "binding",
	[PAM_OPTIONAL]		 = "optional",
	[PAM_REQUIRED]		 = "required",
	[PAM_REQUISITE]		 = "requisite",
	[PAM_SUFFICIENT]	 = "sufficient",
};

const char *pam_func_name[PAM_NUM_PRIMITIVES] = {
	[PAM_SM_AUTHENTICATE]	 = "pam_authenticate",
	[PAM_SM_SETCRED]	 = "pam_setcred",
	[PAM_SM_ACCT_MGMT]	 = "pam_acct_mgmt",
	[PAM_SM_OPEN_SESSION]	 = "pam_open_session",
	[PAM_SM_CLOSE_SESSION]	 = "pam_close_session",
	[PAM_SM_CHAUTHTOK]	 = "pam_chauthtok"
};

const char *pam_sm_func_name[PAM_NUM_PRIMITIVES] = {
	[PAM_SM_AUTHENTICATE]	 = "pam_sm_authenticate",
	[PAM_SM_SETCRED]	 = "pam_sm_setcred",
	[PAM_SM_ACCT_MGMT]	 = "pam_sm_acct_mgmt",
	[PAM_SM_OPEN_SESSION]	 = "pam_sm_open_session",
	[PAM_SM_CLOSE_SESSION]	 = "pam_sm_close_session",
	[PAM_SM_CHAUTHTOK]	 = "pam_sm_chauthtok"
};

const char *openpam_policy_path[] = {
	"/etc/pam.d/",
	"/etc/pam.conf",
#ifdef LOCALBASE
	LOCALBASE "/etc/pam.d/",
	LOCALBASE "/etc/pam.conf",
#endif
	NULL
};

const char *openpam_module_path[] = {
#ifdef OPENPAM_MODULES_DIRECTORY
	OPENPAM_MODULES_DIRECTORY,
#elif defined(COMPAT_libcompat)
	"/usr/lib" COMPAT_libcompat,
	"/usr/local/lib" COMPAT_libcompat,
#else
	"/usr/lib",
#ifdef LOCALBASE
	LOCALBASE "/lib",
#endif
#endif
	NULL
};