1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
/* ========================================================================
* Copyright 1988-2006 University of Washington
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
*
* ========================================================================
*/
/*
* Program: AFS check password
*
* Author: Mark Crispin
* Networks and Distributed Computing
* Computing & Communications
* University of Washington
* Administration Building, AG-44
* Seattle, WA 98195
* Internet: MRC@CAC.Washington.EDU
*
* Date: 1 August 1988
* Last Edited: 30 August 2006
*/
/* AFS cleanup
* Accepts: data
*/
void checkpw_cleanup (void *data)
{
ktc_ForgetAllTokens ();
}
/* Check password
* Accepts: login passwd struct
* password string
* argument count
* argument vector
* Returns: passwd struct if password validated, NIL otherwise
*/
#undef INIT
#define min AFS_MIN
#define max AFS_MAX
#include <afs/param.h>
#include <afs/kautils.h>
struct passwd *checkpw (struct passwd *pw,char *pass,int argc,char *argv[])
{
char *reason;
/* faster validation for POP servers */
if (!strcmp ((char *) mail_parameters (NIL,GET_SERVICENAME,NIL),"pop")) {
struct ktc_encryptionKey key;
struct ktc_token token;
/* just check the password */
ka_StringToKey (pass,NIL,&key);
if (ka_GetAdminToken (pw->pw_name,"","",&key,600,&token,1)) return NIL;
}
/* check password and get AFS token */
else if (ka_UserAuthenticateGeneral
(KA_USERAUTH_VERSION + KA_USERAUTH_DOSETPAG,pw->pw_name,NIL,NIL,
pass,0,0,0,&reason)) return NIL;
/* arm hook to delete credentials */
mail_parameters (NIL,SET_LOGOUTHOOK,(void *) checkpw_cleanup);
return pw;
}
|
