tag:blogger.com,1999:blog-538313904544169736.post1808910645755579314..comments2023-09-03T08:24:19.643+00:00Comments on Computing Stuff: pam_filter not workingAnonymoushttp://www.blogger.com/profile/17095655964278860017noreply@blogger.comBlogger3125tag:blogger.com,1999:blog-538313904544169736.post-85022167740348266062011-01-10T16:52:46.841+00:002011-01-10T16:52:46.841+00:00Frankly, if the search string parser is coded prop...Frankly, if the search string parser is coded properly, multiple layers of parenthesis should not cause issues. The outer set should be parsed as containing a single complex token which is recursively passes into another iteration for processing.<br /><br />((((attr=1)))) for example should uselessly recurse 4 times and then the 5th layer should evaluate 'attr=1' which is then passed back up the 5-deep chain to the final result.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-538313904544169736.post-41404754281421437542009-04-02T17:27:00.000+00:002009-04-02T17:27:00.000+00:00pam_filter doesn't work at all for me. I have it ...pam_filter doesn't work at all for me. I have it set to:<BR/><BR/>pam_filter gidNumber=50178<BR/><BR/>But anyone can log in. Any idea what I could be doing wrong?Lee Revellnoreply@blogger.comtag:blogger.com,1999:blog-538313904544169736.post-70380107262510740732008-03-19T17:36:00.000+00:002008-03-19T17:36:00.000+00:00pam_filter will support complex filters, but as yo...pam_filter will support complex filters, but as you noticed, you can't use (|(gidNumber=1028)(gidNumber=1160)) due to how the module is coded. The module takes the argument to pam_filter and then inserts it as a variable into a filter string: (&(%s)(%s)(%s=%s)) where the first two variables are filter strings, the third is an attribute (uid by default), and the fourth is the user. The trick is to use |(gidNumber=1028)(gidNumber=1160) without the extra parens, because the extra parens already get added in the snprintf when the final filter is built.Anonymousnoreply@blogger.com