94d661ac8c
o Use syslog
o Remove references to stdout/stderr (incl perror())
o Introduce VarTerm - the interactive terminal or zero
o Allow "set timeout" to affect current session
o Change "set debug" to "set log"
o Allow "set log [+|-]flag"
o Make MSEXT and PASSWDAUTH stuff the default
o Move all #ifdef DEBUG stuff into the code - this
shouldn't be too much overhead. It's now controlled
with "set log +debug"
o Add "set log command, debug, tun, warn, error, alert"
o Remove cdefs.h, and assume an ansi compiler.
o Improve all diagnostic output
o Don't trap SIGSEGV
o SIGHUP now terminates again (log files are controlled
by syslog)
o Call CloseModem() when changing devices
o Fix parsing of third arg of "delete"
I think this fixes the "magic is same" problems that some
people have been experiencing.
The man page is being rewritten. It'll follow soon.
110 lines
2.8 KiB
C
110 lines
2.8 KiB
C
/*
|
|
*
|
|
* passwdauth.c - pjchilds@imforei.apana.org.au
|
|
*
|
|
* authenticate user via the password file
|
|
*
|
|
* Redistribution and use in source and binary forms are permitted
|
|
* provided that the above copyright notice and this paragraph are
|
|
* duplicated in all such forms and that any documentation,
|
|
* advertising materials, and other materials related to such
|
|
* distribution and use acknowledge that the software was developed
|
|
* by the Peter Childs. The name of the author may not be used to
|
|
* endorse or promote products derived from this software without
|
|
* specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
|
|
* IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
|
|
* WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
|
|
*
|
|
*/
|
|
|
|
#include <sys/types.h>
|
|
#include <utmp.h>
|
|
#include <time.h>
|
|
#include <libutil.h>
|
|
#include <pwd.h>
|
|
#include "fsm.h"
|
|
#include "passwdauth.h"
|
|
|
|
int
|
|
PasswdAuth(name, key)
|
|
char *name, *key;
|
|
{
|
|
static int logged_in = 0;
|
|
struct passwd *pwd;
|
|
char *salt, *ep;
|
|
struct utmp utmp;
|
|
|
|
LogPrintf(LogDEBUG, "PasswdAuth: Called with name %s, key %s\n", name, key );
|
|
|
|
if(( pwd = getpwnam( name ) ))
|
|
salt = pwd->pw_passwd;
|
|
else
|
|
{
|
|
endpwent();
|
|
LogPrintf( LogLCP, "PasswdAuth - user (%s) not in passwd file\n", name );
|
|
return 0; /* false - failed to authenticate (password not in file) */
|
|
}
|
|
|
|
#ifdef LOCALHACK
|
|
/*
|
|
* All our PPP usernames start with 'P' so i check that here... if you
|
|
* don't do this i suggest all your PPP users be members of a group
|
|
* and you check the guid
|
|
*/
|
|
|
|
if( name[0] != 'P' )
|
|
{
|
|
LogPrintf( LogLCP, "PasswdAuth - user (%s) not a PPP user\n", name );
|
|
endpwent();
|
|
return 0;
|
|
}
|
|
|
|
#endif /* LOCALHACK */
|
|
|
|
ep = crypt( key, salt );
|
|
|
|
/* strcmp returns 0 if same */
|
|
if( strcmp( ep, pwd->pw_passwd ) != 0 )
|
|
{
|
|
LogPrintf( LogLCP, "PasswdAuth - user (%s,%s) authentication failed\n",
|
|
name, key );
|
|
endpwent();
|
|
return 0; /* false - failed to authenticate (didn't match up) */
|
|
}
|
|
|
|
/*
|
|
* now we log them in... we have a static login flag so we don't
|
|
* do it twice :)
|
|
*/
|
|
|
|
if( ! logged_in )
|
|
{
|
|
(void)time(&utmp.ut_time);
|
|
(void)strncpy(utmp.ut_name, name, sizeof(utmp.ut_name));
|
|
|
|
/*
|
|
* if the first three chacters are "pap" trim them off before doing
|
|
* utmp entry (see sample.ppp-pap-dialup
|
|
*/
|
|
|
|
if( strncmp( "pap", dstsystem, 3 ) == 0 )
|
|
(void)strncpy(utmp.ut_line, (char *)(dstsystem + 3), sizeof(utmp.ut_line));
|
|
else
|
|
(void)strncpy(utmp.ut_line, dstsystem, sizeof(utmp.ut_line));
|
|
|
|
(void)strncpy(utmp.ut_host, "auto-ppp",sizeof(utmp.ut_host));
|
|
login(&utmp);
|
|
(void)setlogin( pwd->pw_name );
|
|
|
|
LogPrintf( LogLCP, "PasswdAuth has logged in user %s\n", name );
|
|
|
|
logged_in = 1;
|
|
}
|
|
|
|
endpwent();
|
|
|
|
return 1;
|
|
}
|