src/auth/passdb-shadow.c

	passdb-shadow.c revision 7b93f7355ddbff6956aa7d35cf9801601f36c5dc
/* Copyright (C) 2002-2003 Timo Sirainen */

#include "config.h"
#undef HAVE_CONFIG_H

#ifdef PASSDB_SHADOW

#include "common.h"
#include "safe-memset.h"
#include "passdb.h"
#include "mycrypt.h"

#include <shadow.h>

static void
shadow_verify_plain(struct auth_request *request, const char *password,
            verify_plain_callback_t *callback)
{
    const char *user;
    struct spwd *spw;
    int result;

    if (request->realm == NULL)
        user = request->user;
    else
        user = t_strconcat(request->user, "@", request->realm, NULL);

    spw = getspnam(user);
    if (spw == NULL) {
        if (errno != 0)
            i_error("getspnam(%s) failed: %m", user);
        else if (verbose)
            i_info("shadow(%s): unknown user", user);
        callback(PASSDB_RESULT_USER_UNKNOWN, request);
        return;
    }

    if (!IS_VALID_PASSWD(spw->sp_pwdp)) {
        if (verbose) {
            i_info("shadow(%s): invalid password field '%s'",
                   user, spw->sp_pwdp);
        }
        callback(PASSDB_RESULT_USER_DISABLED, request);
        return;
    }

    /* check if the password is valid */
    result = strcmp(mycrypt(password, spw->sp_pwdp), spw->sp_pwdp) == 0;

    /* clear the passwords from memory */
    safe_memset(spw->sp_pwdp, 0, strlen(spw->sp_pwdp));

    if (!result) {
        if (verbose)
            i_info("shadow(%s): password mismatch", user);
        callback(PASSDB_RESULT_PASSWORD_MISMATCH, request);
        return;
    }

    callback(PASSDB_RESULT_OK, request);
}

static void shadow_deinit(void)
{
        endspent();
}

struct passdb_module passdb_shadow = {
    NULL,
    shadow_deinit,

    shadow_verify_plain,
    NULL
};

#endif