auth-bsdauth.c revision 146998 
1/*
2 * Copyright (c) 2001 Markus Friedl.  All rights reserved.
3 *
4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions
6 * are met:
7 * 1. Redistributions of source code must retain the above copyright
8 *    notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright
10 *    notice, this list of conditions and the following disclaimer in the
11 *    documentation and/or other materials provided with the distribution.
12 *
13 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
14 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
15 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
16 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
17 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
18 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
19 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
20 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
21 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
22 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
23 */
24#include "includes.h"
25RCSID("$OpenBSD: auth-bsdauth.c,v 1.6 2005/01/19 13:11:47 dtucker Exp $");
26
27#ifdef BSD_AUTH
28#include "xmalloc.h"
29#include "auth.h"
30#include "log.h"
31#include "monitor_wrap.h"
32
33static void *
34bsdauth_init_ctx(Authctxt *authctxt)
35{
36	return authctxt;
37}
38
39int
40bsdauth_query(void *ctx, char **name, char **infotxt,
41   u_int *numprompts, char ***prompts, u_int **echo_on)
42{
43	Authctxt *authctxt = ctx;
44	char *challenge = NULL;
45
46	if (authctxt->as != NULL) {
47		debug2("bsdauth_query: try reuse session");
48		challenge = auth_getitem(authctxt->as, AUTHV_CHALLENGE);
49		if (challenge == NULL) {
50			auth_close(authctxt->as);
51			authctxt->as = NULL;
52		}
53	}
54
55	if (challenge == NULL) {
56		debug2("bsdauth_query: new bsd auth session");
57		debug3("bsdauth_query: style %s",
58		    authctxt->style ? authctxt->style : "<default>");
59		authctxt->as = auth_userchallenge(authctxt->user,
60		    authctxt->style, "auth-ssh", &challenge);
61		if (authctxt->as == NULL)
62			challenge = NULL;
63		debug2("bsdauth_query: <%s>", challenge ? challenge : "empty");
64	}
65
66	if (challenge == NULL)
67		return -1;
68
69	*name = xstrdup("");
70	*infotxt = xstrdup("");
71	*numprompts = 1;
72	*prompts = xmalloc(*numprompts * sizeof(char *));
73	*echo_on = xmalloc(*numprompts * sizeof(u_int));
74	(*echo_on)[0] = 0;
75	(*prompts)[0] = xstrdup(challenge);
76
77	return 0;
78}
79
80int
81bsdauth_respond(void *ctx, u_int numresponses, char **responses)
82{
83	Authctxt *authctxt = ctx;
84	int authok;
85
86	if (!authctxt->valid)
87		return -1;
88
89	if (authctxt->as == 0)
90		error("bsdauth_respond: no bsd auth session");
91
92	if (numresponses != 1)
93		return -1;
94
95	authok = auth_userresponse(authctxt->as, responses[0], 0);
96	authctxt->as = NULL;
97	debug3("bsdauth_respond: <%s> = <%d>", responses[0], authok);
98
99	return (authok == 0) ? -1 : 0;
100}
101
102static void
103bsdauth_free_ctx(void *ctx)
104{
105	Authctxt *authctxt = ctx;
106
107	if (authctxt && authctxt->as) {
108		auth_close(authctxt->as);
109		authctxt->as = NULL;
110	}
111}
112
113KbdintDevice bsdauth_device = {
114	"bsdauth",
115	bsdauth_init_ctx,
116	bsdauth_query,
117	bsdauth_respond,
118	bsdauth_free_ctx
119};
120
121KbdintDevice mm_bsdauth_device = {
122	"bsdauth",
123	bsdauth_init_ctx,
124	mm_bsdauth_query,
125	mm_bsdauth_respond,
126	bsdauth_free_ctx
127};
128#endif
129