1 | /* |
---|
2 | * Copyright (c) 2001 Markus Friedl. All rights reserved. |
---|
3 | * |
---|
4 | * Redistribution and use in source and binary forms, with or without |
---|
5 | * modification, are permitted provided that the following conditions |
---|
6 | * are met: |
---|
7 | * 1. Redistributions of source code must retain the above copyright |
---|
8 | * notice, this list of conditions and the following disclaimer. |
---|
9 | * 2. Redistributions in binary form must reproduce the above copyright |
---|
10 | * notice, this list of conditions and the following disclaimer in the |
---|
11 | * documentation and/or other materials provided with the distribution. |
---|
12 | * |
---|
13 | * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR |
---|
14 | * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES |
---|
15 | * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. |
---|
16 | * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, |
---|
17 | * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT |
---|
18 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
---|
19 | * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
---|
20 | * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
---|
21 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
---|
22 | * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
---|
23 | */ |
---|
24 | #include "includes.h" |
---|
25 | RCSID("$OpenBSD: auth-skey.c,v 1.20 2002/06/30 21:59:45 deraadt Exp $"); |
---|
26 | |
---|
27 | #ifdef SKEY |
---|
28 | |
---|
29 | #include <skey.h> |
---|
30 | |
---|
31 | #include "xmalloc.h" |
---|
32 | #include "auth.h" |
---|
33 | #include "monitor_wrap.h" |
---|
34 | |
---|
35 | static void * |
---|
36 | skey_init_ctx(Authctxt *authctxt) |
---|
37 | { |
---|
38 | return authctxt; |
---|
39 | } |
---|
40 | |
---|
41 | int |
---|
42 | skey_query(void *ctx, char **name, char **infotxt, |
---|
43 | u_int* numprompts, char ***prompts, u_int **echo_on) |
---|
44 | { |
---|
45 | Authctxt *authctxt = ctx; |
---|
46 | char challenge[1024], *p; |
---|
47 | int len; |
---|
48 | struct skey skey; |
---|
49 | |
---|
50 | if (skeychallenge(&skey, authctxt->user, challenge) == -1) |
---|
51 | return -1; |
---|
52 | |
---|
53 | *name = xstrdup(""); |
---|
54 | *infotxt = xstrdup(""); |
---|
55 | *numprompts = 1; |
---|
56 | *prompts = xmalloc(*numprompts * sizeof(char *)); |
---|
57 | *echo_on = xmalloc(*numprompts * sizeof(u_int)); |
---|
58 | (*echo_on)[0] = 0; |
---|
59 | |
---|
60 | len = strlen(challenge) + strlen(SKEY_PROMPT) + 1; |
---|
61 | p = xmalloc(len); |
---|
62 | strlcpy(p, challenge, len); |
---|
63 | strlcat(p, SKEY_PROMPT, len); |
---|
64 | (*prompts)[0] = p; |
---|
65 | |
---|
66 | return 0; |
---|
67 | } |
---|
68 | |
---|
69 | int |
---|
70 | skey_respond(void *ctx, u_int numresponses, char **responses) |
---|
71 | { |
---|
72 | Authctxt *authctxt = ctx; |
---|
73 | |
---|
74 | if (authctxt->valid && |
---|
75 | numresponses == 1 && |
---|
76 | skey_haskey(authctxt->pw->pw_name) == 0 && |
---|
77 | skey_passcheck(authctxt->pw->pw_name, responses[0]) != -1) |
---|
78 | return 0; |
---|
79 | return -1; |
---|
80 | } |
---|
81 | |
---|
82 | static void |
---|
83 | skey_free_ctx(void *ctx) |
---|
84 | { |
---|
85 | /* we don't have a special context */ |
---|
86 | } |
---|
87 | |
---|
88 | KbdintDevice skey_device = { |
---|
89 | "skey", |
---|
90 | skey_init_ctx, |
---|
91 | skey_query, |
---|
92 | skey_respond, |
---|
93 | skey_free_ctx |
---|
94 | }; |
---|
95 | |
---|
96 | KbdintDevice mm_skey_device = { |
---|
97 | "skey", |
---|
98 | skey_init_ctx, |
---|
99 | mm_skey_query, |
---|
100 | mm_skey_respond, |
---|
101 | skey_free_ctx |
---|
102 | }; |
---|
103 | #endif /* SKEY */ |
---|