Initial import of the CDE 2.1.30 sources from the Open Group.

cde/lib/pam/pam_modules/dial_auth/dial_auth.c

@@ -0,0 +1,139 @@
+/* $XConsortium: dial_auth.c /main/5 1996/05/09 04:28:31 drk $ */
+
+/*
+ * Copyright (c) 1992-1995, by Sun Microsystems, Inc.
+ * All rights reserved.
+ */
+
+#ident	"@(#)dial_auth.c 1.20	96/02/09 SMI"
+
+#include "unix_headers.h"
+
+/*
+ * pam_sm_auth_port	- This is the top level function in the
+ *			module called by pam_auth_port in the framework
+ *			Returns: PAM_SERVICE_ERR on failure, 0 on success
+ */
+
+int
+pam_sm_authenticate(
+	pam_handle_t	*pamh,
+	int	flags,
+	int	argc,
+	const char	**argv)
+{
+	char	*ttyn, *user;
+	struct	pam_conv	*pam_convp;
+	FILE 	*fp;
+	char 	defpass[30];
+	char	line[80];
+	char 	*p1, *p2;
+	struct passwd 	pwd;
+	char	pwd_buffer[1024];
+	char	*password;
+	static struct pam_response *ret_resp;
+	int	retcode;
+	char 	messages[PAM_MAX_NUM_MSG][PAM_MAX_MSG_SIZE];
+	int 	num_msg;
+	int	i;
+	int	debug = 0;
+
+	for (i = 0; i < argc; i++) {
+		if (strcasecmp(argv[i], "debug") == 0)
+			debug = 1;
+		else
+			syslog(LOG_DEBUG, "illegal option %s", argv[i]);
+	}
+
+	if ((retcode = pam_get_user(pamh, &user, NULL))
+					!= PAM_SUCCESS ||
+	    (retcode = pam_get_item(pamh, PAM_TTY, (void **)&ttyn))
+					!= PAM_SUCCESS ||
+	    (retcode = pam_get_item(pamh, PAM_CONV, (void **)&pam_convp))
+					!= PAM_SUCCESS)
+		return (retcode);
+
+	if (debug) {
+		syslog(LOG_DEBUG,
+			"Dialpass authenticate user = %s, ttyn = %s",
+			user, ttyn);
+	}
+
+	if (getpwnam_r(user, &pwd, pwd_buffer, sizeof (pwd_buffer)) == NULL)
+		return (PAM_USER_UNKNOWN);
+
+	if ((fp = fopen(DIAL_FILE, "r")) == NULL) {
+		return (PAM_SUCCESS);
+	}
+
+	while ((p1 = fgets(line, sizeof (line), fp)) != NULL) {
+		while (*p1 != '\n' && *p1 != ' ' && *p1 != '\t')
+			p1++;
+		*p1 = '\0';
+		if (strcmp(line, ttyn) == 0)
+			break;
+	}
+
+	(void) fclose(fp);
+
+	if (p1 == NULL || (fp = fopen(DPASS_FILE, "r")) == NULL)
+		return (PAM_SUCCESS);
+
+	defpass[0] = '\0';
+	p2 = 0;
+
+	while ((p1 = fgets(line, sizeof (line)-1, fp)) != NULL) {
+		while (*p1 && *p1 != ':')
+			p1++;
+		*p1++ = '\0';
+		p2 = p1;
+		while (*p1 && *p1 != ':')
+			p1++;
+		*p1 = '\0';
+		if (pwd.pw_shell != NULL && strcmp(pwd.pw_shell, line) == 0)
+			break;
+
+		if (strcmp(SHELL, line) == 0)
+			SCPYN(defpass, p2);
+		p2 = 0;
+	}
+
+	(void) fclose(fp);
+
+	if (!p2)
+		p2 = defpass;
+
+	if (*p2 != '\0') {
+		strcpy(messages[0], PAM_MSG(pamh, 1, "Dialup Password: "));
+		num_msg = 1;
+		retcode = __pam_get_input(PAM_PROMPT_ECHO_OFF, pam_convp->conv,
+				num_msg, messages, NULL, &ret_resp);
+		if (retcode != PAM_SUCCESS)
+			return (retcode);
+		password = ret_resp->resp;
+
+		/* UNIX passwords can only be 8 characters long */
+		password[8] = '\0';
+
+		if (strcmp(crypt(password, p2), p2)) {
+			__pam_free_resp(num_msg, ret_resp);
+			return (PAM_SERVICE_ERR);
+		}
+		__pam_free_resp(num_msg, ret_resp);
+	}
+
+	return (PAM_SUCCESS);
+
+}
+
+/*
+ * dummy pam_sm_setcred - does nothing
+ */
+pam_sm_setcred(
+	pam_handle_t    *pamh,
+	int	flags,
+	int	argc,
+	const char    **argv)
+{
+	return (PAM_SUCCESS);
+}