diff options
| author | Arthur de Jong <arthur@arthurdejong.org> | 2009-10-17 17:08:49 +0200 |
|---|---|---|
| committer | Arthur de Jong <arthur@arthurdejong.org> | 2009-10-17 17:08:49 +0200 |
| commit | 3d019ede58bd85317a1be1a25a8e45476deaf9c0 (patch) | |
| tree | 26e558e0a103123c3b33e4cd62018a94b24eca0c /compat/pam_get_authtok.c | |
| parent | 5a3eb1df560f29c4692e01594fc63d22bb4c50ee (diff) | |
provide a replacement for the pam_get_authtok() functions for systems without it
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1008 ef36b2f9-881f-0410-afb5-c4e39611909c
Diffstat (limited to 'compat/pam_get_authtok.c')
| -rw-r--r-- | compat/pam_get_authtok.c | 123 |
1 files changed, 123 insertions, 0 deletions
diff --git a/compat/pam_get_authtok.c b/compat/pam_get_authtok.c new file mode 100644 index 0000000..c471d34 --- /dev/null +++ b/compat/pam_get_authtok.c @@ -0,0 +1,123 @@ +/* + pam_get_authtok.c - replacement function for pam_get_authtok() + + Copyright (C) 2009 Arthur de Jong + + This library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2.1 of the License, or (at your option) any later version. + + This library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with this library; if not, write to the Free Software + Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA + 02110-1301 USA +*/ + +#include "config.h" + +#include <stdlib.h> +#include <stdio.h> +#include <string.h> +#include <errno.h> +#include <syslog.h> +#include <unistd.h> +#include <sys/types.h> + +#include "compat/attrs.h" +#include "compat/pam_compat.h" + +static int prompt_passwd(struct pam_conv *conv,const char *prompt, + char **passwd) +{ + struct pam_message msg,*msgs[1]; + struct pam_response *resp; + int rc; + /* provide fallback */ + *passwd=NULL; + /* set up prompt */ + msg.msg_style=PAM_PROMPT_ECHO_OFF; + msg.msg=prompt; + msgs[0]=&msg; + resp=NULL; + rc=conv->conv(1,(const struct pam_message **)msgs,&resp,conv->appdata_ptr); + if (rc!=PAM_SUCCESS) + return rc; + else if (resp==NULL) + return PAM_CONV_ERR; + else if (resp[0].resp==NULL) + { + free(resp); + return PAM_CONV_ERR; + } + *passwd=resp[0].resp; + resp[0].resp=NULL; + free(resp); + return PAM_SUCCESS; +} + +int pam_get_authtok(pam_handle_t *pamh,int item,const char **authtok,const char *prompt) +{ + int rc; + char *passwd=NULL,*retype_passwd=NULL; + const void *oldauthtok; + struct pam_conv *conv; + char retype_prompt[80]; + /* first try to see if the value is already on the stack */ + *authtok=NULL; + rc=pam_get_item(pamh,item,(const void **)authtok); + if ((rc==PAM_SUCCESS)&&(*authtok!=NULL)) + return PAM_SUCCESS; + /* check what to prompt for and provide default prompt */ + *retype_prompt='\0'; + if (item==PAM_OLDAUTHTOK) + prompt=(prompt!=NULL)?prompt:"Old Password: "; + else + { + rc=pam_get_item(pamh,PAM_OLDAUTHTOK,&oldauthtok); + if ((rc==PAM_SUCCESS)&&(oldauthtok!=NULL)) + { + prompt=(prompt!=NULL)?prompt:"New Password: "; + snprintf(retype_prompt,sizeof(retype_prompt),"Retype %s",prompt); + retype_prompt[sizeof(retype_prompt)-1]='\0'; + } + else + prompt=(prompt!=NULL)?prompt:"Password: "; + } + /* get PAM_CONV */ + rc=pam_get_item(pamh,PAM_CONV,(const void **)&conv); + if (rc!=PAM_SUCCESS) + return rc; + /* prepare prompt and get password */ + rc=prompt_passwd(conv,prompt,&passwd); + if (rc!=PAM_SUCCESS) + return rc; + /* if a second prompt should be presented, do it */ + if (*retype_prompt) + { + rc=prompt_passwd(conv,retype_prompt,&retype_passwd); + /* check passwords */ + if ((rc==PAM_SUCCESS)&&(strcmp(retype_passwd,passwd)!=0)) + rc=PAM_AUTHTOK_RECOVERY_ERR; + } + /* store the password if everything went ok */ + if (rc==PAM_SUCCESS) + rc=pam_set_item(pamh,item,passwd); + /* clear and free any password information */ + memset(passwd,0,strlen(passwd)); + free(passwd); + if (retype_passwd!=NULL) + { + memset(retype_passwd,0,strlen(retype_passwd)); + free(retype_passwd); + } + if (rc!=PAM_SUCCESS) + return rc; + /* return token from the stack */ + return pam_get_item(pamh,item,(const void **)authtok); +} |