auth-bsdauth.c revision 92555 
1/*
2 * Copyright (c) 2001 Markus Friedl.  All rights reserved.
3 *
4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions
6 * are met:
7 * 1. Redistributions of source code must retain the above copyright
8 *    notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright
10 *    notice, this list of conditions and the following disclaimer in the
11 *    documentation and/or other materials provided with the distribution.
12 *
13 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
14 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
15 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
16 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
17 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
18 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
19 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
20 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
21 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
22 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
23 */
24#include "includes.h"
25RCSID("$OpenBSD: auth-bsdauth.c,v 1.2 2001/12/19 07:18:56 deraadt Exp $");
26
27#ifdef BSD_AUTH
28#include "xmalloc.h"
29#include "auth.h"
30#include "log.h"
31
32static void *
33bsdauth_init_ctx(Authctxt *authctxt)
34{
35	return authctxt;
36}
37
38static int
39bsdauth_query(void *ctx, char **name, char **infotxt,
40   u_int *numprompts, char ***prompts, u_int **echo_on)
41{
42	Authctxt *authctxt = ctx;
43	char *challenge = NULL;
44
45	if (authctxt->as != NULL) {
46		debug2("bsdauth_query: try reuse session");
47		challenge = auth_getitem(authctxt->as, AUTHV_CHALLENGE);
48		if (challenge == NULL) {
49			auth_close(authctxt->as);
50			authctxt->as = NULL;
51		}
52	}
53
54	if (challenge == NULL) {
55		debug2("bsdauth_query: new bsd auth session");
56		debug3("bsdauth_query: style %s",
57		    authctxt->style ? authctxt->style : "<default>");
58		authctxt->as = auth_userchallenge(authctxt->user,
59		     authctxt->style, "auth-ssh", &challenge);
60		if (authctxt->as == NULL)
61			challenge = NULL;
62		debug2("bsdauth_query: <%s>", challenge ? challenge : "empty");
63	}
64
65	if (challenge == NULL)
66		return -1;
67
68	*name       = xstrdup("");
69	*infotxt    = xstrdup("");
70	*numprompts = 1;
71	*prompts = xmalloc(*numprompts * sizeof(char*));
72	*echo_on = xmalloc(*numprompts * sizeof(u_int));
73	(*echo_on)[0] = 0;
74	(*prompts)[0] = xstrdup(challenge);
75
76	return 0;
77}
78
79static int
80bsdauth_respond(void *ctx, u_int numresponses, char **responses)
81{
82	Authctxt *authctxt = ctx;
83	int authok;
84
85	if (authctxt->as == 0)
86		error("bsdauth_respond: no bsd auth session");
87
88	if (numresponses != 1)
89		return -1;
90
91	authok = auth_userresponse(authctxt->as, responses[0], 0);
92	authctxt->as = NULL;
93	debug3("bsdauth_respond: <%s> = <%d>", responses[0], authok);
94
95	return (authok == 0) ? -1 : 0;
96}
97
98static void
99bsdauth_free_ctx(void *ctx)
100{
101	Authctxt *authctxt = ctx;
102
103	if (authctxt && authctxt->as) {
104		auth_close(authctxt->as);
105		authctxt->as = NULL;
106	}
107}
108
109KbdintDevice bsdauth_device = {
110	"bsdauth",
111	bsdauth_init_ctx,
112	bsdauth_query,
113	bsdauth_respond,
114	bsdauth_free_ctx
115};
116#endif
117