src/auth/mech-login.c

	mech-login.c revision 73bfdbe28c2ce6d143eadf0bab8ccfbe4cab0fae
/*
 * LOGIN authentication mechanism.
 *
 * Copyright (c) 2004 Andrey Panin <pazke@donpac.ru>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as published
 * by the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 */

#include "common.h"
#include "mech.h"
#include "passdb.h"
#include "safe-memset.h"

static void verify_callback(enum passdb_result result,
                struct auth_request *request)
{
    mech_auth_finish(request, NULL, 0, result == PASSDB_RESULT_OK);
}

static void
mech_login_auth_continue(struct auth_request *request,
             const unsigned char *data, size_t data_size,
             mech_callback_t *callback)
{
    static const char prompt2[] = "Password:";
    const char *error;

    request->callback = callback;

    if (request->user == NULL) {
        request->user = p_strndup(request->pool, data, data_size);

        if (!mech_fix_username(request->user, &error)) {
            if (verbose) {
                i_info("login(%s): %s",
                       get_log_prefix(request), error);
            }
            mech_auth_finish(request, NULL, 0, FALSE);
            return;
        }

        callback(request, AUTH_CLIENT_RESULT_CONTINUE,
             prompt2, strlen(prompt2));
    } else {
        char *pass = p_strndup(unsafe_data_stack_pool, data, data_size);
        passdb->verify_plain(request, pass, verify_callback);
        safe_memset(pass, 0, strlen(pass));
    }
}

static void
mech_login_auth_initial(struct auth_request *request,
            const unsigned char *data __attr_unused__,
            size_t data_size __attr_unused__,
            mech_callback_t *callback)
{
    static const char prompt1[] = "Username:";

    callback(request, AUTH_CLIENT_RESULT_CONTINUE,
         prompt1, strlen(prompt1));
}

static void mech_login_auth_free(struct auth_request *request)
{
    pool_unref(request->pool);
}

static struct auth_request *mech_login_auth_new(void)
{
    struct auth_request *request;
    pool_t pool;

    pool = pool_alloconly_create("login_auth_request", 256);
    request = p_new(pool, struct auth_request, 1);

    request->refcount = 1;
    request->pool = pool;
    return request;
}

const struct mech_module mech_login = {
    "LOGIN",

    MEMBER(flags) MECH_SEC_PLAINTEXT,

    MEMBER(passdb_need_plain) TRUE,
    MEMBER(passdb_need_credentials) FALSE,

    mech_login_auth_new,
    mech_login_auth_initial,
    mech_login_auth_continue,
        mech_login_auth_free
};