src/auth/mech-login.c

	mech-login.c revision 6135260095e1704ed6edff9d00bdfc043c11429c
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainen/*
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainen * LOGIN authentication mechanism.
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainen *
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainen * Copyright (c) 2004 Andrey Panin <pazke@donpac.ru>
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainen *
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainen * This software is released under the MIT license.
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainen */
8b2bcc21bd7ab7936559bd2e6bb310075e5d0d08Timo Sirainen
a89b1c5c1485b8ed9dc2c611ad1f72f20c0ed6afTimo Sirainen#include "auth-common.h"
43d32cbe60fdaef2699d99f1ca259053e9350411Timo Sirainen#include "mech.h"
43d32cbe60fdaef2699d99f1ca259053e9350411Timo Sirainen#include "passdb.h"
43d32cbe60fdaef2699d99f1ca259053e9350411Timo Sirainen#include "safe-memset.h"
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainen#include "mech-plain-common.h"
a89b1c5c1485b8ed9dc2c611ad1f72f20c0ed6afTimo Sirainen
a89b1c5c1485b8ed9dc2c611ad1f72f20c0ed6afTimo Sirainen
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainenstatic void
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainenmech_login_auth_continue(struct auth_request *request,
43d32cbe60fdaef2699d99f1ca259053e9350411Timo Sirainen             const unsigned char *data, size_t data_size)
43d32cbe60fdaef2699d99f1ca259053e9350411Timo Sirainen{
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainen    static const char prompt2[] = "Password:";
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainen    const char *username, *error;
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainen
43d32cbe60fdaef2699d99f1ca259053e9350411Timo Sirainen    if (request->user == NULL) {
9d7451b57769988f7e3e41cd8790e65429ffc5c7Timo Sirainen        username = t_strndup(data, data_size);
9d7451b57769988f7e3e41cd8790e65429ffc5c7Timo Sirainen
9d7451b57769988f7e3e41cd8790e65429ffc5c7Timo Sirainen        if (!auth_request_set_username(request, username, &error)) {
9bf98814caf6ca9091a77e1eeb5d64bfc5c537afTimo Sirainen                        auth_request_log_info(request, AUTH_SUBSYS_MECH, "%s", error);
            auth_request_fail(request);
            return;
        }

        auth_request_handler_reply_continue(request, prompt2,
                            strlen(prompt2));
    } else {
        char *pass = p_strndup(unsafe_data_stack_pool, data, data_size);
        auth_request_verify_plain(request, pass, plain_verify_callback);
        safe_memset(pass, 0, strlen(pass));
    }
}

static void
mech_login_auth_initial(struct auth_request *request,
            const unsigned char *data, size_t data_size)
{
    static const char prompt1[] = "Username:";

    if (data_size == 0) {
        auth_request_handler_reply_continue(request, prompt1,
                            strlen(prompt1));
    } else {
        mech_login_auth_continue(request, data, data_size);
    }
}

static struct auth_request *mech_login_auth_new(void)
{
    struct auth_request *request;
    pool_t pool;

    pool = pool_alloconly_create("login_auth_request", 1024);
    request = p_new(pool, struct auth_request, 1);
    request->pool = pool;
    return request;
}

const struct mech_module mech_login = {
    "LOGIN",

    .flags = MECH_SEC_PLAINTEXT,
    .passdb_need = MECH_PASSDB_NEED_VERIFY_PLAIN,

    mech_login_auth_new,
    mech_login_auth_initial,
    mech_login_auth_continue,
    mech_generic_auth_free
};