This repository has been archived by the owner on Feb 28, 2024. It is now read-only.
libtac
- Refactored the complex and overengineered TACACS+ session id generation, replacing it with getrandom on all systems, with gnulib provided implementation for systems that do not have it.
- Removed legacy MD5 code and replaced it with gnulib implementation for easier maintenance and compatibility.
- Legacy data structures such as attribute lists were replaced with gnulib structures.
- CHAP implementation used a fixed challenge in contradiction with the RFC 1994 requirement. This was replaced with a pseudo-random challenge generated using
getrandom
. - ABI version set to
5:0:0
. From now on, this is the only way to version the library. The legacy static variablestac_ver_
were removed as confusing
pam_tacplus
- Calling process PID is now used as the
task_id
attribute in TACACS+ accounting session. This replaces an overengineered cryptographically random tasks identifiers. - Updated Debian build instructions.
This release v1.7.0.tar.gz
file is signed using SigStore.