[apple/network_cmds.git] / rpc_yppasswdd.tproj / yppasswdd_mkpw.c

/*
 * Copyright (c) 1999 Apple Computer, Inc. All rights reserved.
 *
 * @APPLE_LICENSE_HEADER_START@
 * 
 * "Portions Copyright (c) 1999 Apple Computer, Inc.  All Rights
 * Reserved.  This file contains Original Code and/or Modifications of
 * Original Code as defined in and that are subject to the Apple Public
 * Source License Version 1.0 (the 'License').  You may not use this file
 * except in compliance with the License.  Please obtain a copy of the
 * License at http://www.apple.com/publicsource and read it before using
 * this file.
 * 
 * The Original Code and all software distributed under the License are
 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT.  Please see the
 * License for the specific language governing rights and limitations
 * under the License."
 * 
 * @APPLE_LICENSE_HEADER_END@
 */
/*	$OpenBSD: yppasswdd_mkpw.c,v 1.16 1997/11/17 23:56:20 gene Exp $	*/

/*
 * Copyright (c) 1994 Mats O Jansson <moj@stacken.kth.se>
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *	This product includes software developed by Mats O Jansson
 * 4. The name of the author may not be used to endorse or promote products
 *    derived from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS
 * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#ifndef LINT
static char rcsid[] = "$OpenBSD: yppasswdd_mkpw.c,v 1.16 1997/11/17 23:56:20 gene Exp $";
#endif

#include <sys/param.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <stdio.h>
#include <fcntl.h>
#include <rpc/rpc.h>
#include <rpcsvc/yppasswd.h>
#include <db.h>
#include <pwd.h>
#include <stdlib.h>
#include <unistd.h>
#include <util.h>
#include <ctype.h>
#include <string.h>
#include <syslog.h>
#include <err.h>

extern int noshell;
extern int nogecos;
extern int nopw;
extern int make;
extern char make_arg[];

static void _pw_copy(int, int, struct passwd *);

/* This is imported from OpenBSD's libutil because it's argument
 * incompatible with NetBSD's. However, the NetBSD libutil is
 * at least what the prototypes suggest is in System.framework,
 * even though I can't find the code. I assume it will be there
 * eventually. We need to use NetBSD's because it works with the
 * pwd_mkdb binary that's shipped with Rhapsody. This is an area
 * where OpenBSD diverges; however, we wanted to keep the OpenBSD
 * rpc.yppasswdd because the rest of our YP code is from OpenBSD.
 * What a mess.
 */
static void
_pw_copy(ffd, tfd, pw)
	int ffd, tfd;
	struct passwd *pw;
{
	FILE   *from, *to;
	int	done;
	char   *p, buf[8192];

	if (!(from = fdopen(ffd, "r")))
		pw_error(_PATH_MASTERPASSWD, 1, 1);
	if (!(to = fdopen(tfd, "w")))
		pw_error(_PATH_MASTERPASSWD_LOCK, 1, 1);

	for (done = 0; fgets(buf, sizeof(buf), from);) {
		if (!strchr(buf, '\n')) {
			warnx("%s: line too long", _PATH_MASTERPASSWD);
			pw_error(NULL, 0, 1);
		}
		if (done) {
			(void)fprintf(to, "%s", buf);
			if (ferror(to))
				goto err;
			continue;
		}
		if (!(p = strchr(buf, ':'))) {
			warnx("%s: corrupted entry", _PATH_MASTERPASSWD);
			pw_error(NULL, 0, 1);
		}
		*p = '\0';
		if (strcmp(buf, pw->pw_name)) {
			*p = ':';
			(void)fprintf(to, "%s", buf);
			if (ferror(to))
				goto err;
			continue;
		}
		(void)fprintf(to, "%s:%s:%d:%d:%s:%ld:%ld:%s:%s:%s\n",
		    pw->pw_name, pw->pw_passwd, pw->pw_uid, pw->pw_gid,
		    pw->pw_class, pw->pw_change, pw->pw_expire, pw->pw_gecos,
		    pw->pw_dir, pw->pw_shell);
		done = 1;
		if (ferror(to))
			goto err;
	}
	if (!done)
		(void)fprintf(to, "%s:%s:%d:%d:%s:%ld:%ld:%s:%s:%s\n",
		    pw->pw_name, pw->pw_passwd, pw->pw_uid, pw->pw_gid,
		    pw->pw_class, pw->pw_change, pw->pw_expire, pw->pw_gecos,
		    pw->pw_dir, pw->pw_shell);

	if (ferror(to))
err:
	pw_error(NULL, 0, 1);
	(void)fclose(to);
}


int
badchars(base)
	char *base;
{
	int ampr = 0;
	char *s;

	for (s = base; *s; s++) {
		if (*s == '&')
			ampr++;
		if (!isprint(*s))
			return 1;
		if (strchr(":\n\t\r", *s))
			return 1;
	}
	if (ampr > 10)
		return 1;
	return 0;
}

int
subst(s, from, to)
	char *s;
	char from, to;
{
	int	n = 0;

	while (*s) {
		if (*s == from) {
			*s = to;
			n++;
		}
		s++;
	}
	return (n);
}

int
make_passwd(argp)
	yppasswd *argp;
{
	struct passwd pw;
	int     pfd, tfd;
	char	buf[10], *bp = NULL, *p, *t;
	int	n;
	ssize_t cnt;
	size_t	resid;
	struct stat st;

	pw_init();
	pfd = open(_PATH_MASTERPASSWD, O_RDONLY);
	if (pfd < 0)
		goto fail;
	if (fstat(pfd, &st))
		goto fail;
	p = bp = malloc((resid = st.st_size) + 1);
	do {
		cnt = read(pfd, p, resid);
		if (cnt < 0)
			goto fail;
		p += cnt;
		resid -= cnt;
	} while (resid > 0);
	close(pfd);
	pfd = -1;
	*p = '\0';		/* Buf oflow prevention */

	p = bp;
	subst(p, '\n', '\0');
	for (n = 1; p < bp + st.st_size; n++, p = t) {
		t = strchr(p, '\0') + 1;
		/* Rhapsody allows the passwd file to have comments in it. */
		if (p[0] == '#') {
			continue;
		}
		cnt = subst(p, ':', '\0');
		if (cnt != 9) {
			syslog(LOG_WARNING, "bad entry at line %d of %s", n,
			    _PATH_MASTERPASSWD);
			continue;
		}

		if (strcmp(p, argp->newpw.pw_name) == 0)
			break;
	}
	if (p >= bp + st.st_size)
		goto fail;

#define	EXPAND(e)	e = p; while (*p++);
	EXPAND(pw.pw_name);
	EXPAND(pw.pw_passwd);
	pw.pw_uid = atoi(p); EXPAND(t);
	pw.pw_gid = atoi(p); EXPAND(t);
	EXPAND(pw.pw_class);
	pw.pw_change = (time_t)atol(p); EXPAND(t);
	pw.pw_expire = (time_t)atol(p); EXPAND(t);
	EXPAND(pw.pw_gecos);
	EXPAND(pw.pw_dir);
	EXPAND(pw.pw_shell);

	/* crypt() is broken under Rhapsody. It doesn't deal with
	 * empty keys or salts like other Unices.
	 */
	if (pw.pw_passwd[0] != '\0' && argp->oldpass != NULL && argp->oldpass[0] != '\0') {
		if (strcmp(crypt(argp->oldpass, pw.pw_passwd), pw.pw_passwd) != 0)
			goto fail;
	}
	
	if (!nopw && badchars(argp->newpw.pw_passwd))
		goto fail;
	if (!nogecos && badchars(argp->newpw.pw_gecos))
		goto fail;
	if (!nogecos && badchars(argp->newpw.pw_shell))
		goto fail;

	/*
	 * Get the new password.  Reset passwd change time to zero; when
	 * classes are implemented, go and get the "offset" value for this
	 * class and reset the timer.
	 */
	if (!nopw) {
		pw.pw_passwd = argp->newpw.pw_passwd;
		pw.pw_change = 0;
	}
	if (!nogecos)
		pw.pw_gecos = argp->newpw.pw_gecos;
	if (!noshell)
		pw.pw_shell = argp->newpw.pw_shell;

	for (n = 0, p = pw.pw_gecos; *p; p++)
		if (*p == '&')
			n = n + strlen(pw.pw_name) - 1;
	if (strlen(pw.pw_name) + 1 + strlen(pw.pw_passwd) + 1 +
	    strlen((sprintf(buf, "%d", pw.pw_uid), buf)) + 1 +
	    strlen((sprintf(buf, "%d", pw.pw_gid), buf)) + 1 +
	    strlen(pw.pw_gecos) + n + 1 + strlen(pw.pw_dir) + 1 +
	    strlen(pw.pw_shell) >= 1023)
		goto fail;

	pfd = open(_PATH_MASTERPASSWD, O_RDONLY, 0);
	if (pfd < 0) {
		syslog(LOG_ERR, "cannot open %s", _PATH_MASTERPASSWD);
		goto fail;
	}

	tfd = pw_lock(0);
	if (tfd < 0)
		goto fail;

	_pw_copy(pfd, tfd, &pw);
	pw_mkdb();
	free(bp);

	if (fork() == 0) {
		chdir("/var/yp");
		(void)umask(022);
		system(make_arg);
		exit(0);
	}
	return (0);

fail:
	if (bp)
		free(bp);
	if (pfd >= 0)
		close(pfd);
	return (1);
}
Commit	Line	Data
b7080c8e A	1	/*
	2	* Copyright (c) 1999 Apple Computer, Inc. All rights reserved.
	3	*
	4	* @APPLE_LICENSE_HEADER_START@
	5	*
	6	* "Portions Copyright (c) 1999 Apple Computer, Inc. All Rights
	7	* Reserved. This file contains Original Code and/or Modifications of
	8	* Original Code as defined in and that are subject to the Apple Public
	9	* Source License Version 1.0 (the 'License'). You may not use this file
	10	* except in compliance with the License. Please obtain a copy of the
	11	* License at http://www.apple.com/publicsource and read it before using
	12	* this file.
	13	*
	14	* The Original Code and all software distributed under the License are
	15	* distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
	16	* EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
	17	* INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
	18	* FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT. Please see the
	19	* License for the specific language governing rights and limitations
	20	* under the License."
	21	*
	22	* @APPLE_LICENSE_HEADER_END@
	23	*/
	24	/* $OpenBSD: yppasswdd_mkpw.c,v 1.16 1997/11/17 23:56:20 gene Exp $ */
	25
	26	/*
	27	* Copyright (c) 1994 Mats O Jansson <moj@stacken.kth.se>
	28	* All rights reserved.
	29	*
	30	* Redistribution and use in source and binary forms, with or without
	31	* modification, are permitted provided that the following conditions
	32	* are met:
	33	* 1. Redistributions of source code must retain the above copyright
	34	* notice, this list of conditions and the following disclaimer.
	35	* 2. Redistributions in binary form must reproduce the above copyright
	36	* notice, this list of conditions and the following disclaimer in the
	37	* documentation and/or other materials provided with the distribution.
	38	* 3. All advertising materials mentioning features or use of this software
	39	* must display the following acknowledgement:
	40	* This product includes software developed by Mats O Jansson
	41	* 4. The name of the author may not be used to endorse or promote products
	42	* derived from this software without specific prior written permission.
	43	*
	44	* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS
	45	* OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
	46	* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	47	* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
	48	* DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	49	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	50	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	51	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	52	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	53	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	54	* SUCH DAMAGE.
	55	*/
	56
	57	#ifndef LINT
	58	static char rcsid[] = "$OpenBSD: yppasswdd_mkpw.c,v 1.16 1997/11/17 23:56:20 gene Exp $";
	59	#endif
	60
	61	#include <sys/param.h>
	62	#include <sys/types.h>
	63	#include <sys/stat.h>
	64	#include <stdio.h>
65	#include <fcntl.h>
66	#include <rpc/rpc.h>
67	#include <rpcsvc/yppasswd.h>
68	#include <db.h>
69	#include <pwd.h>
70	#include <stdlib.h>
71	#include <unistd.h>
72	#include <util.h>
73	#include <ctype.h>
74	#include <string.h>
75	#include <syslog.h>
76	#include <err.h>
77
78	extern int noshell;
79	extern int nogecos;
80	extern int nopw;
81	extern int make;
82	extern char make_arg[];
83
84	static void _pw_copy(int, int, struct passwd *);
85
86	/* This is imported from OpenBSD's libutil because it's argument
87	* incompatible with NetBSD's. However, the NetBSD libutil is
88	* at least what the prototypes suggest is in System.framework,
89	* even though I can't find the code. I assume it will be there
90	* eventually. We need to use NetBSD's because it works with the
91	* pwd_mkdb binary that's shipped with Rhapsody. This is an area
92	* where OpenBSD diverges; however, we wanted to keep the OpenBSD
93	* rpc.yppasswdd because the rest of our YP code is from OpenBSD.
94	* What a mess.
95	*/
96	static void
97	_pw_copy(ffd, tfd, pw)
98	int ffd, tfd;
99	struct passwd *pw;
100	{
101	FILE from, to;
102	int done;
103	char *p, buf[8192];
104
105	if (!(from = fdopen(ffd, "r")))
106	pw_error(_PATH_MASTERPASSWD, 1, 1);
107	if (!(to = fdopen(tfd, "w")))
108	pw_error(_PATH_MASTERPASSWD_LOCK, 1, 1);
109
110	for (done = 0; fgets(buf, sizeof(buf), from);) {
111	if (!strchr(buf, '\n')) {
112	warnx("%s: line too long", _PATH_MASTERPASSWD);
113	pw_error(NULL, 0, 1);
114	}
115	if (done) {
116	(void)fprintf(to, "%s", buf);
117	if (ferror(to))
118	goto err;
119	continue;
120	}
121	if (!(p = strchr(buf, ':'))) {
122	warnx("%s: corrupted entry", _PATH_MASTERPASSWD);
123	pw_error(NULL, 0, 1);
124	}
125	*p = '\0';
126	if (strcmp(buf, pw->pw_name)) {
127	*p = ':';
128	(void)fprintf(to, "%s", buf);
129	if (ferror(to))
130	goto err;
131	continue;
132	}
133	(void)fprintf(to, "%s:%s:%d:%d:%s:%ld:%ld:%s:%s:%s\n",
134	pw->pw_name, pw->pw_passwd, pw->pw_uid, pw->pw_gid,
135	pw->pw_class, pw->pw_change, pw->pw_expire, pw->pw_gecos,
136	pw->pw_dir, pw->pw_shell);
137	done = 1;
138	if (ferror(to))
139	goto err;
140	}
141	if (!done)
142	(void)fprintf(to, "%s:%s:%d:%d:%s:%ld:%ld:%s:%s:%s\n",
143	pw->pw_name, pw->pw_passwd, pw->pw_uid, pw->pw_gid,
144	pw->pw_class, pw->pw_change, pw->pw_expire, pw->pw_gecos,
145	pw->pw_dir, pw->pw_shell);
146
147	if (ferror(to))
148	err:
149	pw_error(NULL, 0, 1);
150	(void)fclose(to);
151	}
152
153
154	int
155	badchars(base)
156	char *base;
157	{
158	int ampr = 0;
159	char *s;
160
161	for (s = base; *s; s++) {
162	if (*s == '&')
163	ampr++;
164	if (!isprint(*s))
165	return 1;
166	if (strchr(":\n\t\r", *s))
167	return 1;
168	}
169	if (ampr > 10)
170	return 1;
171	return 0;
172	}
173
174	int
175	subst(s, from, to)
176	char *s;
177	char from, to;
178	{
179	int n = 0;
180
181	while (*s) {
182	if (*s == from) {
183	*s = to;
184	n++;
185	}
186	s++;
187	}
188	return (n);
189	}
190
191	int
192	make_passwd(argp)
193	yppasswd *argp;
194	{
195	struct passwd pw;
196	int pfd, tfd;
197	char buf[10], bp = NULL, p, *t;
198	int n;
199	ssize_t cnt;
200	size_t resid;
201	struct stat st;
202
203	pw_init();
204	pfd = open(_PATH_MASTERPASSWD, O_RDONLY);
205	if (pfd < 0)
206	goto fail;
207	if (fstat(pfd, &st))
208	goto fail;
209	p = bp = malloc((resid = st.st_size) + 1);
210	do {
211	cnt = read(pfd, p, resid);
212	if (cnt < 0)
213	goto fail;
214	p += cnt;
215	resid -= cnt;
216	} while (resid > 0);
217	close(pfd);
218	pfd = -1;
219	p = '\0'; / Buf oflow prevention */
220
221	p = bp;
222	subst(p, '\n', '\0');
223	for (n = 1; p < bp + st.st_size; n++, p = t) {
224	t = strchr(p, '\0') + 1;
225	/* Rhapsody allows the passwd file to have comments in it. */
226	if (p[0] == '#') {
227	continue;
228	}
229	cnt = subst(p, ':', '\0');
230	if (cnt != 9) {
231	syslog(LOG_WARNING, "bad entry at line %d of %s", n,
232	_PATH_MASTERPASSWD);
233	continue;
234	}
235
236	if (strcmp(p, argp->newpw.pw_name) == 0)
237	break;
238	}
239	if (p >= bp + st.st_size)
240	goto fail;
241
242	#define EXPAND(e) e = p; while (*p++);
243	EXPAND(pw.pw_name);
244	EXPAND(pw.pw_passwd);
245	pw.pw_uid = atoi(p); EXPAND(t);
246	pw.pw_gid = atoi(p); EXPAND(t);
247	EXPAND(pw.pw_class);
248	pw.pw_change = (time_t)atol(p); EXPAND(t);
249	pw.pw_expire = (time_t)atol(p); EXPAND(t);
250	EXPAND(pw.pw_gecos);
251	EXPAND(pw.pw_dir);
252	EXPAND(pw.pw_shell);
253
254	/* crypt() is broken under Rhapsody. It doesn't deal with
255	* empty keys or salts like other Unices.
256	*/
257	if (pw.pw_passwd[0] != '\0' && argp->oldpass != NULL && argp->oldpass[0] != '\0') {
258	if (strcmp(crypt(argp->oldpass, pw.pw_passwd), pw.pw_passwd) != 0)
259	goto fail;
260	}
261
262	if (!nopw && badchars(argp->newpw.pw_passwd))
263	goto fail;
264	if (!nogecos && badchars(argp->newpw.pw_gecos))
265	goto fail;
266	if (!nogecos && badchars(argp->newpw.pw_shell))
267	goto fail;
268
269	/*
270	* Get the new password. Reset passwd change time to zero; when
271	* classes are implemented, go and get the "offset" value for this
272	* class and reset the timer.
273	*/
274	if (!nopw) {
275	pw.pw_passwd = argp->newpw.pw_passwd;
276	pw.pw_change = 0;
277	}
278	if (!nogecos)
279	pw.pw_gecos = argp->newpw.pw_gecos;
280	if (!noshell)
281	pw.pw_shell = argp->newpw.pw_shell;
282
283	for (n = 0, p = pw.pw_gecos; *p; p++)
284	if (*p == '&')
285	n = n + strlen(pw.pw_name) - 1;
286	if (strlen(pw.pw_name) + 1 + strlen(pw.pw_passwd) + 1 +
287	strlen((sprintf(buf, "%d", pw.pw_uid), buf)) + 1 +
288	strlen((sprintf(buf, "%d", pw.pw_gid), buf)) + 1 +
289	strlen(pw.pw_gecos) + n + 1 + strlen(pw.pw_dir) + 1 +
290	strlen(pw.pw_shell) >= 1023)
291	goto fail;
292
293	pfd = open(_PATH_MASTERPASSWD, O_RDONLY, 0);
294	if (pfd < 0) {
295	syslog(LOG_ERR, "cannot open %s", _PATH_MASTERPASSWD);
296	goto fail;
297	}
298
299	tfd = pw_lock(0);
300	if (tfd < 0)
301	goto fail;
302
303	_pw_copy(pfd, tfd, &pw);
304	pw_mkdb();
305	free(bp);
306
307	if (fork() == 0) {
308	chdir("/var/yp");
309	(void)umask(022);
310	system(make_arg);
311	exit(0);
312	}
313	return (0);
314
315	fail:
316	if (bp)
317	free(bp);
318	if (pfd >= 0)
319	close(pfd);
320	return (1);
321	}