pam_vprompt.c revision 99158
191094Sdes/*-
292289Sdes * Copyright (c) 2002 Networks Associates Technology, Inc.
391094Sdes * All rights reserved.
491094Sdes *
591094Sdes * This software was developed for the FreeBSD Project by ThinkSec AS and
699158Sdes * Network Associates Laboratories, the Security Research Division of
799158Sdes * Network Associates, Inc.  under DARPA/SPAWAR contract N66001-01-C-8035
899158Sdes * ("CBOSS"), as part of the DARPA CHATS research program.
991094Sdes *
1091094Sdes * Redistribution and use in source and binary forms, with or without
1191094Sdes * modification, are permitted provided that the following conditions
1291094Sdes * are met:
1391094Sdes * 1. Redistributions of source code must retain the above copyright
1491094Sdes *    notice, this list of conditions and the following disclaimer.
1591094Sdes * 2. Redistributions in binary form must reproduce the above copyright
1691094Sdes *    notice, this list of conditions and the following disclaimer in the
1791094Sdes *    documentation and/or other materials provided with the distribution.
1891094Sdes * 3. The name of the author may not be used to endorse or promote
1991094Sdes *    products derived from this software without specific prior written
2091094Sdes *    permission.
2191094Sdes *
2291094Sdes * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
2391094Sdes * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
2491094Sdes * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
2591094Sdes * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
2691094Sdes * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
2791094Sdes * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
2891094Sdes * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
2991094Sdes * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
3091094Sdes * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
3191094Sdes * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
3291094Sdes * SUCH DAMAGE.
3391094Sdes *
3499158Sdes * $P4: //depot/projects/openpam/lib/pam_vprompt.c#7 $
3591094Sdes */
3691094Sdes
3791094Sdes#include <stdarg.h>
3891094Sdes#include <stdio.h>
3991094Sdes#include <stdlib.h>
4091094Sdes
4191094Sdes#include <security/pam_appl.h>
4291094Sdes#include <security/openpam.h>
4391094Sdes
4491094Sdes/*
4591094Sdes * OpenPAM extension
4691094Sdes *
4791094Sdes * Call the conversation function
4891094Sdes */
4991094Sdes
5091094Sdesint
5191094Sdespam_vprompt(pam_handle_t *pamh,
5291094Sdes	int style,
5391094Sdes	char **resp,
5491094Sdes	const char *fmt,
5591094Sdes	va_list ap)
5691094Sdes{
5791094Sdes	char msgbuf[PAM_MAX_MSG_SIZE];
5891094Sdes	struct pam_message msg;
5991094Sdes	const struct pam_message *msgp;
6091094Sdes	struct pam_response *rsp;
6191097Sdes	struct pam_conv *conv;
6291094Sdes	int r;
6391094Sdes
6491097Sdes	r = pam_get_item(pamh, PAM_CONV, (const void **)&conv);
6591097Sdes	if (r != PAM_SUCCESS)
6691094Sdes		return (r);
6791097Sdes	if (conv == NULL) {
6891097Sdes		openpam_log(PAM_LOG_ERROR, "no conversation function");
6991097Sdes		return (PAM_SYSTEM_ERR);
7091097Sdes	}
7191094Sdes	vsnprintf(msgbuf, PAM_MAX_MSG_SIZE, fmt, ap);
7291094Sdes	msg.msg_style = style;
7391094Sdes	msg.msg = msgbuf;
7491094Sdes	msgp = &msg;
7594968Sdes	rsp = NULL;
7691097Sdes	r = (conv->conv)(1, &msgp, &rsp, conv->appdata_ptr);
7791094Sdes	*resp = rsp == NULL ? NULL : rsp->resp;
7891094Sdes	free(rsp);
7991094Sdes	return (r);
8091094Sdes}
8191100Sdes
8291100Sdes/*
8391100Sdes * Error codes:
8491100Sdes *
8591100Sdes *     !PAM_SYMBOL_ERR
8691100Sdes *	PAM_SYSTEM_ERR
8791100Sdes *	PAM_BUF_ERR
8891100Sdes *	PAM_CONV_ERR
8991100Sdes */
9091100Sdes
9191100Sdes/**
9291100Sdes * The =pam_vprompt function constructs a string from the =fmt and =ap
9391100Sdes * arguments using =vsnprintf, and passes it to the given PAM context's
9491100Sdes * conversation function.
9591100Sdes *
9691100Sdes * The =style argument specifies the type of interaction requested, and
9791100Sdes * must be one of the following:
9891100Sdes *
9991100Sdes *	=PAM_PROMPT_ECHO_OFF:
10091100Sdes *		Display the message and obtain the user's response without
10191100Sdes *		displaying it.
10291100Sdes *	=PAM_PROMPT_ECHO_ON:
10391100Sdes *		Display the message and obtain the user's response.
10491100Sdes *	=PAM_ERROR_MSG:
10591100Sdes *		Display the message as an error message, and do not wait
10691100Sdes *		for a response.
10791100Sdes *	=PAM_TEXT_INFO:
10891100Sdes *		Display the message as an informational message, and do
10991100Sdes *		not wait for a response.
11091100Sdes *
11191100Sdes * A pointer to the response, or =NULL if the conversation function did
11291100Sdes * not return one, is stored in the location pointed to by the =resp
11391100Sdes * argument.
11491100Sdes *
11591100Sdes * The message and response should not exceed =PAM_MAX_MSG_SIZE or
11691100Sdes * =PAM_MAX_RESP_SIZE, respectively.
11791100Sdes * If they do, they may be truncated.
11891100Sdes *
11991100Sdes * >pam_error
12091100Sdes * >pam_info
12191100Sdes * >pam_prompt
12291100Sdes * >pam_verror
12391100Sdes * >pam_vinfo
12491100Sdes */
125