mirror
/
tac_plus
mirror of https://github.com/facebook/tac_plus
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
96 Commits 6 Branches 0 Tags 1.3 MiB
Commit Graph

96 Commits

Author SHA1 Message Date
RollerMatic dd38c2d727
Merge pull request #52 from facebook/add_hyphen_to_validator 
Add hyphen support to is_valid_name validation
 2025-08-22 10:31:41 -07:00
RollerMatic cb2cf71397 Add hyphen support to is_valid_name validation 2025-08-21 18:54:20 -07:00
RollerMatic 4b1d611e0e
Merge pull request #48 from bk2zsto/systemd_and_nowrap 
honor cli definition of libwrap and systemd
 2024-11-03 22:30:53 -08:00
Bill Melvin bfaf3371a2 honor cli definition of libwrap and systemd 2024-07-18 12:44:53 -04:00
Cooper Lees 69fd5b3aa2
Merge pull request #42 from shringiarpit26/fix-copyright-tacacs-spec 2023-10-06 19:02:05 -07:00
Arpit Shringi 12048f3505 Added copyright inforamtion in tacacs.spec 2023-10-06 17:43:50 -07:00
Davide Cavalca 572e489f98
Merge pull request #38 from kajtzu/main 
miscellaneous fixes to building and packaging on ELx
 2023-10-05 15:40:39 -07:00
Davide Cavalca 4949475e44
Merge pull request #40 from mianosm/main 
licensing is MIT per the LICENSE file, not BSD
 2023-10-05 15:39:32 -07:00
RollerMatic 4fdf17890e
Merge pull request #41 from facebook/author_data_validation 
Author data validation
 2023-10-05 13:00:48 -07:00
RollerMatic c223facc4d fix github whitespaces 2023-10-05 11:27:47 -07:00
RollerMatic 68ba2a1947 add a validation function for author_data fields 2023-10-05 11:25:23 -07:00
Steven M. Miano 8d17ddc8c7 licensing is MIT per the LICENSE file, not BSD 2023-05-24 17:23:59 -04:00
Kaj Niemi 681ecd26ab technically we do not need to require pam 
the final package will instead require libpam.so.whatever and that will
allow yum/dnf to pull down whatever is needed
 2023-05-17 15:34:26 +00:00
Kaj Niemi 7990b91a1b move -fPIE earlier 2023-05-17 15:29:45 +00:00
Kaj Niemi 48970a2612 fix python2/3 on various ELs 2023-05-17 15:23:54 +00:00
Kaj Niemi d7078b35bc move .py file in %files 2023-05-17 15:16:19 +00:00
Kaj Niemi e5806b40f0 misc fixes to building and EL6..EL9 2023-05-17 15:14:57 +00:00
Kaj Niemi b89059402c make work on EL9, small fixes to keep the bitrot away 2023-05-17 14:48:56 +00:00
Cooper Lees 25fd8f0eae
Merge pull request #35 from davide125/bump 
Bump version to F4.0.4.28-7fb
 2022-09-06 01:51:58 +10:00
Davide Cavalca 46290cf7b7 Regenerate autotools 2022-09-05 14:35:03 +01:00
Davide Cavalca 8d273992b6 Bump version to F4.0.4.28-7fb 2022-09-05 14:34:31 +01:00
Cooper Lees e9c166413c
Merge pull request #34 from davide125/license 
Relicense Meta contributions to MIT
 2022-09-04 16:19:02 -07:00
Davide Cavalca 9545fe7c8e Relicense Meta contributions to MIT 2022-09-02 10:11:10 -07:00
RollerMatic 1be1defb6e
Merge pull request #33 from facebook/repair_printf_vulnerability 
Add specifier to LOG func
 2022-08-22 15:46:08 -07:00
RollerMatic 785dc7e745
Merge pull request #32 from davide125/autoconf 
Regenerate autotools
 2022-08-19 15:31:26 -07:00
Davide Cavalca 556ff11531 Regenerate autotools 2022-08-19 11:26:30 -04:00
sahuja4 7969f21b0f Add specifier to LOG func 2022-08-18 11:35:50 -07:00
RollerMatic bba9a22fe9
Merge pull request #31 from facebook/add_patches_for_supporting_centOS8 
add patches to support CentOS8
 2022-08-18 11:31:25 -07:00
sahuja4 2fa5b69f4a add patches to support CentOS8 2022-08-11 11:52:50 -07:00
Neel Goyal a139be28b9
Merge pull request #26 from ragzilla/default-user-values 
Users should use values from DEFAULT user if specific user definition not available
 2021-12-14 15:26:35 -05:00
Neel Goyal 62dd3b1f07
Update CONTRIBUTING to reflect main 2021-08-11 13:31:42 -04:00
Matt 421492ec7f
Update config.c 
allow retrieving user variables from the DEFAULT user when the specific user doesn't exist

via http://www.shrubbery.net/pipermail/tac_plus/2016-September/001837.html
 2019-05-13 11:58:02 -04:00
Cooper Lees 259251e6f1
Merge pull request #24 from facebook/more_more_copyright 
More Copyright
 2019-02-11 09:19:53 -08:00
Cooper Ry Lees 6a8bd85d60 More Copyright 
- Should be last diff
- Exempting the rest in the latest check ...
 2019-02-11 09:11:03 -08:00
David Rothera f28244cdc1
Merge pull request #23 from facebook/more_copyright 
Another attempt at making our Open Source tooling happy
 2019-02-11 05:44:35 +00:00
Cooper Ry Lees 40e4da9861 Another attempt at making our Open Source tooling happy 2019-02-10 15:02:42 -08:00
Cooper Lees 3e65bd2ce1
Merge pull request #22 from nemith/restart 
Add reloading support to service
 2018-12-11 18:10:15 -08:00
Brandon Bennett 1349a9eca2 Add reloading support to service 
This adds ExecReload command to send the SIGHUP signal to the service.
This  should cause the service to reload the config instead of forcing a
restart on config changes.

Test on centos7:

```
[vagrant@localhost x86_64]$ sudo systemctl status tac_plus
● tac_plus.service - TACACS+ IPv4 Daemon
   Loaded: loaded (/usr/lib/systemd/system/tac_plus.service; enabled; vendor preset: disabled)
   Active: active (running) since Tue 2018-12-11 23:45:35 UTC; 9s ago
  Process: 25822 ExecStartPre=/usr/sbin/tac_plus -C /etc/tac_plus.conf -P (code=exited, status=0/SUCCESS)
 Main PID: 25823 (tac_plus)
   CGroup: /system.slice/tac_plus.service
           └─25823 /usr/sbin/tac_plus -C /etc/tac_plus.conf -G

Dec 11 23:45:35 localhost.localdomain systemd[1]: Starting TACACS+ IPv4 Daemon...
Dec 11 23:45:35 localhost.localdomain tac_plus[25822]: Reading config
Dec 11 23:45:35 localhost.localdomain tac_plus[25822]: Version F4.0.4.28-6fb Initialized 1
Dec 11 23:45:35 localhost.localdomain tac_plus[25823]: Reading config
Dec 11 23:45:35 localhost.localdomain systemd[1]: Started TACACS+ IPv4 Daemon.
Dec 11 23:45:35 localhost.localdomain tac_plus[25823]: Version F4.0.4.28-6fb Initialized 1
Dec 11 23:45:35 localhost.localdomain tac_plus[25823]: socket FD 4 AF 2
Dec 11 23:45:35 localhost.localdomain tac_plus[25823]: socket FD 5 AF 10
Dec 11 23:45:35 localhost.localdomain tac_plus[25823]: uid=0 euid=0 gid=0 egid=0 s=16707696
[vagrant@localhost x86_64]$ sudo systemctl reload tac_plus
[vagrant@localhost x86_64]$ sudo systemctl status tac_plus
● tac_plus.service - TACACS+ IPv4 Daemon
   Loaded: loaded (/usr/lib/systemd/system/tac_plus.service; enabled; vendor preset: disabled)
   Active: active (running) since Tue 2018-12-11 23:45:35 UTC; 24s ago
  Process: 25836 ExecReload=/bin/kill -HUP $MAINPID (code=exited, status=0/SUCCESS)
  Process: 25822 ExecStartPre=/usr/sbin/tac_plus -C /etc/tac_plus.conf -P (code=exited, status=0/SUCCESS)
 Main PID: 25823 (tac_plus)
   CGroup: /system.slice/tac_plus.service
           └─25823 /usr/sbin/tac_plus -C /etc/tac_plus.conf -G

Dec 11 23:45:35 localhost.localdomain tac_plus[25822]: Version F4.0.4.28-6fb Initialized 1
Dec 11 23:45:35 localhost.localdomain tac_plus[25823]: Reading config
Dec 11 23:45:35 localhost.localdomain systemd[1]: Started TACACS+ IPv4 Daemon.
Dec 11 23:45:35 localhost.localdomain tac_plus[25823]: Version F4.0.4.28-6fb Initialized 1
Dec 11 23:45:35 localhost.localdomain tac_plus[25823]: socket FD 4 AF 2
Dec 11 23:45:35 localhost.localdomain tac_plus[25823]: socket FD 5 AF 10
Dec 11 23:45:35 localhost.localdomain tac_plus[25823]: uid=0 euid=0 gid=0 egid=0 s=16707696
Dec 11 23:45:57 localhost.localdomain tac_plus[25823]: Reading config
Dec 11 23:45:57 localhost.localdomain systemd[1]: Reloaded TACACS+ IPv4 Daemon.
Dec 11 23:45:57 localhost.localdomain tac_plus[25823]: Version F4.0.4.28-6fb Initialized 2
[vagrant@localhost x86_64]$ sudo systemctl restart tac_plus
[vagrant@localhost x86_64]$ sudo systemctl status tac_plus
● tac_plus.service - TACACS+ IPv4 Daemon
   Loaded: loaded (/usr/lib/systemd/system/tac_plus.service; enabled; vendor preset: disabled)
   Active: active (running) since Tue 2018-12-11 23:46:16 UTC; 1s ago
  Process: 25836 ExecReload=/bin/kill -HUP $MAINPID (code=exited, status=0/SUCCESS)
  Process: 25848 ExecStartPre=/usr/sbin/tac_plus -C /etc/tac_plus.conf -P (code=exited, status=0/SUCCESS)
 Main PID: 25850 (tac_plus)
   CGroup: /system.slice/tac_plus.service
           └─25850 /usr/sbin/tac_plus -C /etc/tac_plus.conf -G

Dec 11 23:46:16 localhost.localdomain systemd[1]: Starting TACACS+ IPv4 Daemon...
Dec 11 23:46:16 localhost.localdomain tac_plus[25848]: Reading config
Dec 11 23:46:16 localhost.localdomain tac_plus[25848]: Version F4.0.4.28-6fb Initialized 1
Dec 11 23:46:16 localhost.localdomain systemd[1]: Started TACACS+ IPv4 Daemon.
Dec 11 23:46:16 localhost.localdomain tac_plus[25850]: Reading config
Dec 11 23:46:16 localhost.localdomain tac_plus[25850]: Version F4.0.4.28-6fb Initialized 1
Dec 11 23:46:16 localhost.localdomain tac_plus[25850]: socket FD 4 AF 2
Dec 11 23:46:16 localhost.localdomain tac_plus[25850]: socket FD 5 AF 10
Dec 11 23:46:16 localhost.localdomain tac_plus[25850]: uid=0 euid=0 gid=0 egid=0 s=14352496
```

sysvinit:
```
[vagrant@localhost init.d]$ sudo ./tac_plus start
Starting tac_plus:                                         [  OK  ]
[vagrant@localhost init.d]$ sudo ./tac_plus status
tac_plus (pid  7411) is running...
[vagrant@localhost init.d]$ sudo ./tac_plus reload
Reloading tac_plus:                                        [  OK  ]
[vagrant@localhost init.d]$ sudo ./tac_plus restart
Shutting down tac_plus:                                    [  OK  ]
Starting tac_plus:                                         [  OK  ]
[vagrant@localhost init.d]$ sudo ./tac_plus stop
Shutting down tac_plus:                                    [  OK  ]
[vagrant@localhost init.d]$ sudo cat /var/log/messages
Dec 12 00:09:19 localhost tac_plus[7409]: Reading config
Dec 12 00:09:19 localhost tac_plus[7409]: Version F4.0.4.28-6fb Initialized 1
Dec 12 00:09:30 localhost tac_plus[7411]: Reading config
Dec 12 00:09:30 localhost tac_plus[7411]: Version F4.0.4.28-6fb Initialized 2
Dec 12 00:09:33 localhost tac_plus[7411]: Received signal 15, shutting down
Dec 12 00:09:33 localhost tac_plus[7456]: Reading config
Dec 12 00:09:33 localhost tac_plus[7456]: Version F4.0.4.28-6fb Initialized 1
Dec 12 00:09:35 localhost tac_plus[7458]: Received signal 15, shutting down
```
 2018-12-11 17:10:29 -07:00
Cooper Lees f5dfaa3b3f
Merge pull request #21 from facebook/header_copyright 
Add Copyright comments to all source files
 2018-10-23 14:24:11 -07:00
Cooper Ry Lees 0a2268fe81 Add Copyright comments to all source files 
- `.c`
- `.h`
- `.py`
 2018-10-23 14:20:39 -07:00
Cooper Lees e11ff4099f
Merge pull request #20 from facebook/contribute 
Add CONTRIBUTING File
 2018-10-23 13:51:52 -07:00
Cooper Lees 15111f666a
Merge pull request #19 from facebook/LICENSE 
Add LICENSE File
 2018-10-23 13:48:11 -07:00
Cooper Ry Lees ccaa27087e Add LICENSE File 
- Explain our license in use for tac_plus
 2018-10-23 13:47:10 -07:00
Cooper Ry Lees 6c8738c1b9 Add CONTRIBUTING File 
- Let the people know how to contribute to a Facebook project.
 2018-10-23 13:42:49 -07:00
Cooper Lees 10431584e8
Merge pull request #16 from notjj/master 
Rework all changes on top of F4.0.4.28 (latest upstream)
 2018-06-27 18:59:36 -07:00
Cooper Lees 3efdc2f93e
Merge branch 'master' into master 2018-06-27 18:58:20 -07:00
Cooper Ry Lees 84635d0474 Remove mention of build RPMs, they no longer exist 2018-06-27 18:01:59 -07:00
JJ Crawford b49e6811f1 Add authorization logging, fix double accept condition, use sockaddr_storage instead of sockaddr_in 
Adds authorization logging and flag to turn on/off
Fixes condition under high load where a v4 and v6 request may be accepted and forked to the same child... results in one fd being stranded and the other being serviced as normal. Breaking the for loop is not really the ideal way to fix it, however it beats refactoring all of main() at the moment.

Uses sockaddr_storage instead of sockaddr_in to be address family agnostic
 2018-06-27 17:42:09 -07:00
JJ Crawford 6aa67cba1c Rework against upstream version F4.0.4.28 
- No longer need tacacs+/tacacs+6 split
- Change package name to 'tacacs' to make autoconf happy
- Port in changes from previous version
 2018-06-12 22:26:53 -07:00
David Rothera ff94901988
Merge pull request #14 from fhidalgosola/specfile-fix 
Add python to the spec file build requirements
 2018-03-15 17:42:05 +00:00