pam-ussh icon indicating copy to clipboard operation
pam-ussh copied to clipboard

paramter issuer in pam config splitted into mutiple tokens

Open pelzlbauer opened this issue 2 years ago • 2 comments

Modified pam_jwt.go to allow x509 compatible issuer, fixed by using strings.SplitN instead of strings.Split:

func pamAuthenticate(username string, authToken string, argv []string) (string,
        var verifyUser bool = true
 
        for _, arg := range argv {
-               opt := strings.Split(arg, "=")
+               opt := strings.SplitN(arg, "=", 2)
                switch opt[0] {
                case "secret":
                        secret = opt[1]

pelzlbauer avatar Aug 16 '22 08:08 pelzlbauer

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

CLAassistant avatar Aug 16 '22 08:08 CLAassistant

what is pam_jwt? why are you distributing a binary file? this looks like a completely different module. you've totally removed the ssh cert auth.

pmoody- avatar Aug 16 '22 20:08 pmoody-