kravietz / pam_tacplus

TACACS+ protocol client library and PAM module in C. This PAM module support authentication, authorization (account management) and accounting (session management)performed using TACACS+ protocol designed by Cisco.
GNU Lesser General Public License v3.0
130 stars 97 forks source link

author_r.c: Support receiving 255 attributes #161

Closed deastoe closed 3 years ago

deastoe commented 3 years ago

In 8c273a959dbcfddf92621eb700db57240146b21f a limit of 100 was introduced on the number of attributes which would be processed in an authorization reply.

However a reply may contain up to 255 attributes, and libtac also supports sending up to 255 attributes in an authorization request.

Therefore raise TAC_PLUS_MAX_ARGCOUNT to 255 (TAC_PLUS_ATTRIB_MAX_CNT).