src/auth/passdb-vpopmail.c

	passdb-vpopmail.c revision e866ea67144cb72409700920db2164a2fb35662e
/* Copyright (C) 2002-2003 Timo Sirainen */

/* Thanks to Courier-IMAP for showing how the vpopmail API should be used */

#include "config.h"
#undef HAVE_CONFIG_H

#ifdef PASSDB_VPOPMAIL

#include "common.h"
#include "safe-memset.h"
#include "passdb.h"
#include "password-scheme.h"

#include "userdb-vpopmail.h"

#include <stdlib.h>

static void
vpopmail_verify_plain(struct auth_request *request, const char *password,
              verify_plain_callback_t *callback)
{
    char vpop_user[VPOPMAIL_LIMIT], vpop_domain[VPOPMAIL_LIMIT];
    struct vqpasswd *vpw;
    const char *crypted_pass;
    const char *scheme;
    int ret;

    vpw = vpopmail_lookup_vqp(request->user,
                  vpop_user, vpop_domain);
    if (vpw == NULL) {
        callback(PASSDB_RESULT_USER_UNKNOWN, request);
        return;
    }

    if (((vpw->pw_gid & NO_IMAP) != 0 &&
         strcmp(request->protocol, "IMAP") == 0) ||
        ((vpw->pw_gid & NO_POP) != 0 &&
         strcmp(request->protocol, "POP3") == 0)) {
        if (verbose) {
            i_info("vpopmail(%s): %s disabled",
                   get_log_prefix(request), request->protocol);
        }
        callback(PASSDB_RESULT_USER_DISABLED, request);
        return;
    }

    crypted_pass = vpw->pw_passwd;
    scheme = password_get_scheme(&crypted_pass);
    if (scheme == NULL) scheme = "CRYPT";

    ret = password_verify(password, crypted_pass, scheme, request->user);

    safe_memset(vpw->pw_passwd, 0, strlen(vpw->pw_passwd));
    if (vpw->pw_clear_passwd != NULL) {
        safe_memset(vpw->pw_clear_passwd, 0,
                strlen(vpw->pw_clear_passwd));
    }

    if (ret <= 0) {
        if (ret < 0) {
            i_error("vpopmail(%s): Unknown password scheme %s",
                get_log_prefix(request), scheme);
        } else if (verbose) {
            i_info("vpopmail(%s): password mismatch",
                   get_log_prefix(request));
        }
        callback(PASSDB_RESULT_PASSWORD_MISMATCH, request);
        return;
    }

#ifdef HAVE_VPOPMAIL_OPEN_SMTP_RELAY
    if (strcmp(request->protocol, "POP3") == 0 ||
        strcmp(request->protocol, "IMAP") == 0) {
        const char *host = net_ip2addr(&request->remote_ip);
        if (host != NULL) {
            /* use putenv() directly rather than env_put() which
               would leak memory every time we got here. use a
               static buffer for putenv() as SUSv2 requirements
               would otherwise corrupt our environment later. */
            static char ip_env[256];

            i_snprintf(ip_env, sizeof(ip_env),
                   "TCPREMOTEIP=%s", host);
            putenv(ip_env);
            open_smtp_relay();
        }
    }
#endif

    callback(PASSDB_RESULT_OK, request);
}

static void vpopmail_deinit(void)
{
    vclose();
}

struct passdb_module passdb_vpopmail = {
    NULL, NULL,
    vpopmail_deinit,

    vpopmail_verify_plain,
    NULL
};

#endif