]>
Commit | Line | Data |
---|---|---|
20e66415 A |
1 | /* |
2 | * Copyright (c) 1999 Apple Computer, Inc. All rights reserved. | |
3 | * | |
4 | * @APPLE_LICENSE_HEADER_START@ | |
5 | * | |
c3a08f59 A |
6 | * Copyright (c) 1999-2003 Apple Computer, Inc. All Rights Reserved. |
7 | * | |
8 | * This file contains Original Code and/or Modifications of Original Code | |
9 | * as defined in and that are subject to the Apple Public Source License | |
10 | * Version 2.0 (the 'License'). You may not use this file except in | |
11 | * compliance with the License. Please obtain a copy of the License at | |
12 | * http://www.opensource.apple.com/apsl/ and read it before using this | |
13 | * file. | |
20e66415 A |
14 | * |
15 | * The Original Code and all software distributed under the License are | |
16 | * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER | |
17 | * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, | |
18 | * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, | |
c3a08f59 A |
19 | * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. |
20 | * Please see the License for the specific language governing rights and | |
21 | * limitations under the License. | |
20e66415 A |
22 | * |
23 | * @APPLE_LICENSE_HEADER_END@ | |
24 | */ | |
25 | /* | |
26 | * Copyright (c) 1998 by Apple Computer, Inc. | |
27 | * Portions Copyright (c) 1988 by Sun Microsystems, Inc. | |
28 | * Portions Copyright (c) 1988 The Regents of the University of California. | |
29 | * All rights reserved. | |
30 | * | |
31 | * Redistribution and use in source and binary forms, with or without | |
32 | * modification, are permitted provided that the following conditions | |
33 | * are met: | |
34 | * 1. Redistributions of source code must retain the above copyright | |
35 | * notice, this list of conditions and the following disclaimer. | |
36 | * 2. Redistributions in binary form must reproduce the above copyright | |
37 | * notice, this list of conditions and the following disclaimer in the | |
38 | * documentation and/or other materials provided with the distribution. | |
39 | * 3. All advertising materials mentioning features or use of this software | |
40 | * must display the following acknowledgement: | |
41 | * This product includes software developed by the University of | |
42 | * California, Berkeley and its contributors. | |
43 | * 4. Neither the name of the University nor the names of its contributors | |
44 | * may be used to endorse or promote products derived from this software | |
45 | * without specific prior written permission. | |
46 | * | |
47 | * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND | |
48 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
49 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | |
50 | * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE | |
51 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | |
52 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | |
53 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
54 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | |
55 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | |
56 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | |
57 | * SUCH DAMAGE. | |
58 | */ | |
59 | ||
60 | #include <stdio.h> | |
61 | #include <stdlib.h> | |
62 | #include <unistd.h> | |
63 | #include <string.h> | |
64 | #include <pwd.h> | |
65 | #include <netinet/in.h> | |
66 | #include <rpc/types.h> | |
67 | #include <rpc/xdr.h> | |
68 | #include <rpc/rpc.h> | |
69 | #include <rpcsvc/yp_prot.h> | |
70 | #include <rpcsvc/ypclnt.h> | |
71 | #include <rpcsvc/yppasswd.h> | |
72 | #include <netdb.h> | |
73 | #include <sys/socket.h> | |
74 | #include <sys/file.h> | |
75 | #include <errno.h> | |
76 | ||
77 | #include <DirectoryService/DirServices.h> | |
78 | #include <DirectoryService/DirServicesConst.h> | |
79 | #include <DirectoryService/DirServicesTypes.h> | |
80 | #include <DirectoryService/DirServicesUtils.h> | |
81 | ||
82 | // password server can store 511 characters + a terminator. | |
83 | #define kMaxPassword 512 | |
84 | ||
85 | #define SaySorryAndBail() {status = -1; break;} | |
86 | ||
87 | //------------------------------------------------------------------------------------- | |
88 | // ds_check_passwd | |
89 | //------------------------------------------------------------------------------------- | |
90 | ||
91 | int ds_check_passwd(char *uname, char *domain) | |
92 | { | |
93 | char *p = NULL; | |
94 | tDirReference dsRef = 0; | |
95 | tDataBuffer *tDataBuff = NULL; | |
96 | tDirNodeReference nodeRef = 0; | |
97 | long status = eDSNoErr; | |
98 | tContextData context = NULL; | |
99 | unsigned long nodeCount = 0; | |
100 | unsigned long attrIndex = 0; | |
101 | tDataList *nodeName = NULL; | |
102 | tAttributeEntryPtr pAttrEntry = NULL; | |
103 | tDataList *pRecName = NULL; | |
104 | tDataList *pRecType = NULL; | |
105 | tDataList *pAttrType = NULL; | |
106 | unsigned long recCount = 0; | |
107 | tRecordEntry *pRecEntry = NULL; | |
108 | tAttributeListRef attrListRef = 0; | |
109 | char *pUserLocation = NULL; | |
110 | char *pUserName = NULL; | |
111 | tAttributeValueListRef valueRef = 0; | |
112 | tAttributeValueEntry *pValueEntry = NULL; | |
113 | tDataList *pUserNode = NULL; | |
114 | tDirNodeReference userNodeRef = 0; | |
115 | tDataBuffer *pStepBuff = NULL; | |
116 | tDataNode *pAuthType = NULL; | |
117 | unsigned long uiCurr = 0; | |
118 | unsigned long uiLen = 0; | |
119 | ||
120 | do | |
121 | { | |
122 | if (uname == NULL) | |
123 | SaySorryAndBail(); | |
124 | ||
125 | printf("Checking password for %s.\n", uname); | |
126 | p = getpass("Password:"); | |
127 | if ( p == NULL ) | |
128 | SaySorryAndBail(); | |
129 | ||
130 | status = dsOpenDirService( &dsRef ); | |
131 | if ( status != eDSNoErr ) | |
132 | SaySorryAndBail(); | |
133 | ||
134 | tDataBuff = dsDataBufferAllocate( dsRef, 4096 ); | |
135 | if (tDataBuff == NULL) | |
136 | SaySorryAndBail(); | |
137 | ||
138 | if ( domain != NULL ) | |
139 | { | |
140 | nodeName = dsBuildFromPath( dsRef, domain, "/" ); | |
141 | if ( nodeName == NULL ) break; | |
142 | ||
143 | // find | |
144 | status = dsFindDirNodes( dsRef, tDataBuff, nodeName, eDSiExact, &nodeCount, &context ); | |
145 | } | |
146 | else | |
147 | { | |
148 | // find on search node | |
149 | status = dsFindDirNodes( dsRef, tDataBuff, NULL, eDSSearchNodeName, &nodeCount, &context ); | |
150 | } | |
151 | ||
152 | if ( status != eDSNoErr ) | |
153 | SaySorryAndBail(); | |
154 | ||
155 | if ( nodeCount < 1 ) | |
156 | SaySorryAndBail(); | |
157 | ||
158 | status = dsGetDirNodeName( dsRef, tDataBuff, 1, &nodeName ); | |
159 | if (status != eDSNoErr) | |
160 | SaySorryAndBail(); | |
161 | ||
162 | status = dsOpenDirNode( dsRef, nodeName, &nodeRef ); | |
163 | dsDataListDeallocate( dsRef, nodeName ); | |
164 | free( nodeName ); | |
165 | nodeName = NULL; | |
166 | if (status != eDSNoErr) | |
167 | SaySorryAndBail(); | |
168 | ||
169 | pRecName = dsBuildListFromStrings( dsRef, uname, NULL ); | |
170 | pRecType = dsBuildListFromStrings( dsRef, kDSStdRecordTypeUsers, NULL ); | |
171 | pAttrType = dsBuildListFromStrings( dsRef, kDSNAttrMetaNodeLocation, kDSNAttrRecordName, NULL ); | |
172 | ||
173 | recCount = 1; | |
174 | status = dsGetRecordList( nodeRef, tDataBuff, pRecName, eDSExact, pRecType, | |
175 | pAttrType, 0, &recCount, &context ); | |
176 | if ( status != eDSNoErr || recCount == 0 ) | |
177 | SaySorryAndBail(); | |
178 | ||
179 | status = dsGetRecordEntry( nodeRef, tDataBuff, 1, &attrListRef, &pRecEntry ); | |
180 | if ( status != eDSNoErr ) | |
181 | SaySorryAndBail(); | |
182 | ||
183 | for ( attrIndex = 1; (attrIndex <= pRecEntry->fRecordAttributeCount) && (status == eDSNoErr); attrIndex++ ) | |
184 | { | |
185 | status = dsGetAttributeEntry( nodeRef, tDataBuff, attrListRef, attrIndex, &valueRef, &pAttrEntry ); | |
186 | if ( status == eDSNoErr && pAttrEntry != NULL ) | |
187 | { | |
188 | if ( strcmp( pAttrEntry->fAttributeSignature.fBufferData, kDSNAttrMetaNodeLocation ) == 0 ) | |
189 | { | |
190 | status = dsGetAttributeValue( nodeRef, tDataBuff, 1, valueRef, &pValueEntry ); | |
191 | if ( status == eDSNoErr && pValueEntry != NULL ) | |
192 | { | |
193 | pUserLocation = (char *) calloc( pValueEntry->fAttributeValueData.fBufferLength + 1, sizeof(char) ); | |
194 | memcpy( pUserLocation, pValueEntry->fAttributeValueData.fBufferData, pValueEntry->fAttributeValueData.fBufferLength ); | |
195 | } | |
196 | } | |
197 | else | |
198 | if ( strcmp( pAttrEntry->fAttributeSignature.fBufferData, kDSNAttrRecordName ) == 0 ) | |
199 | { | |
200 | status = dsGetAttributeValue( nodeRef, tDataBuff, 1, valueRef, &pValueEntry ); | |
201 | if ( status == eDSNoErr && pValueEntry != NULL ) | |
202 | { | |
203 | pUserName = (char *) calloc( pValueEntry->fAttributeValueData.fBufferLength + 1, sizeof(char) ); | |
204 | memcpy( pUserName, pValueEntry->fAttributeValueData.fBufferData, pValueEntry->fAttributeValueData.fBufferLength ); | |
205 | } | |
206 | } | |
207 | ||
208 | if ( pValueEntry != NULL ) | |
209 | dsDeallocAttributeValueEntry( dsRef, pValueEntry ); | |
210 | pValueEntry = NULL; | |
211 | ||
212 | dsDeallocAttributeEntry( dsRef, pAttrEntry ); | |
213 | pAttrEntry = NULL; | |
214 | dsCloseAttributeValueList( valueRef ); | |
215 | valueRef = 0; | |
216 | } | |
217 | } | |
218 | ||
219 | pUserNode = dsBuildFromPath( dsRef, pUserLocation, "/" ); | |
220 | status = dsOpenDirNode( dsRef, pUserNode, &userNodeRef ); | |
221 | if ( status != eDSNoErr ) | |
222 | SaySorryAndBail(); | |
223 | ||
224 | pStepBuff = dsDataBufferAllocate( dsRef, 128 ); | |
225 | ||
226 | pAuthType = dsDataNodeAllocateString( dsRef, kDSStdAuthNodeNativeClearTextOK ); | |
227 | uiCurr = 0; | |
228 | ||
229 | // User name | |
230 | uiLen = strlen( pUserName ); | |
231 | memcpy( &(tDataBuff->fBufferData[ uiCurr ]), &uiLen, sizeof( unsigned long ) ); | |
232 | uiCurr += sizeof( unsigned long ); | |
233 | memcpy( &(tDataBuff->fBufferData[ uiCurr ]), pUserName, uiLen ); | |
234 | uiCurr += uiLen; | |
235 | ||
236 | // pw | |
237 | uiLen = strlen( p ); | |
238 | memcpy( &(tDataBuff->fBufferData[ uiCurr ]), &uiLen, sizeof( unsigned long ) ); | |
239 | uiCurr += sizeof( unsigned long ); | |
240 | memcpy( &(tDataBuff->fBufferData[ uiCurr ]), p, uiLen ); | |
241 | uiCurr += uiLen; | |
242 | ||
243 | tDataBuff->fBufferLength = uiCurr; | |
244 | ||
245 | status = dsDoDirNodeAuth( userNodeRef, pAuthType, 1, tDataBuff, pStepBuff, NULL ); | |
246 | ||
247 | } | |
248 | while ( 0 ); | |
249 | ||
250 | // clean up | |
251 | if (tDataBuff != NULL) { | |
252 | memset(tDataBuff, 0, tDataBuff->fBufferSize); | |
253 | dsDataBufferDeAllocate( dsRef, tDataBuff ); | |
254 | tDataBuff = NULL; | |
255 | } | |
256 | ||
257 | if (pStepBuff != NULL) { | |
258 | dsDataBufferDeAllocate( dsRef, pStepBuff ); | |
259 | pStepBuff = NULL; | |
260 | } | |
261 | if (pUserLocation != NULL ) { | |
262 | free(pUserLocation); | |
263 | pUserLocation = NULL; | |
264 | } | |
265 | if (pRecName != NULL) { | |
266 | dsDataListDeallocate( dsRef, pRecName ); | |
267 | free( pRecName ); | |
268 | pRecName = NULL; | |
269 | } | |
270 | if (pRecType != NULL) { | |
271 | dsDataListDeallocate( dsRef, pRecType ); | |
272 | free( pRecType ); | |
273 | pRecType = NULL; | |
274 | } | |
275 | if (pAttrType != NULL) { | |
276 | dsDataListDeallocate( dsRef, pAttrType ); | |
277 | free( pAttrType ); | |
278 | pAttrType = NULL; | |
279 | } | |
280 | if (nodeRef != 0) { | |
281 | dsCloseDirNode(nodeRef); | |
282 | nodeRef = 0; | |
283 | } | |
284 | if (dsRef != 0) { | |
285 | dsCloseDirService(dsRef); | |
286 | dsRef = 0; | |
287 | } | |
288 | ||
289 | if ( status != eDSNoErr ) | |
290 | { | |
291 | errno = EACCES; | |
292 | fprintf(stderr, "Sorry\n"); | |
293 | exit(1); | |
294 | } | |
295 | ||
296 | return 0; | |
297 | } | |
298 | ||
299 | ||
300 | ||
301 | ||
302 | ||
303 |