bcb4e51a409d94ae670de96afb8483a4f7855294Stephan Bosch/* Copyright (c) 2002-2018 Dovecot authors, see the included COPYING file */
25757faf029c369a8318349dafe952e2358df1d8Timo Sirainen
08d6658a4e2ec8104cd1307f6baa75fdb07a24f8Mark Washenberger#include "auth-common.h"
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen#include "array.h"
ff487c974815bdaa2d05a3b834f4c2c841f4cc34Timo Sirainen#include "password-scheme.h"
66d2db642fe24d555d113ba463e446b038d476efTimo Sirainen#include "auth-worker-server.h"
25757faf029c369a8318349dafe952e2358df1d8Timo Sirainen#include "passdb.h"
25757faf029c369a8318349dafe952e2358df1d8Timo Sirainen
4ee00532a265bdfb38539d811fcd12d51210ac35Timo Sirainenstatic ARRAY(struct passdb_module_interface *) passdb_interfaces;
4ee00532a265bdfb38539d811fcd12d51210ac35Timo Sirainenstatic ARRAY(struct passdb_module *) passdb_modules;
b321df9603081896b70ec44635af96d674a9839aTimo Sirainen
9d75363d3fbabc2fbc2d80f06672e3ed8965804aTimo Sirainenstatic const struct passdb_module_interface passdb_iface_deinit = {
9d75363d3fbabc2fbc2d80f06672e3ed8965804aTimo Sirainen .name = "deinit"
9d75363d3fbabc2fbc2d80f06672e3ed8965804aTimo Sirainen};
9d75363d3fbabc2fbc2d80f06672e3ed8965804aTimo Sirainen
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenstatic struct passdb_module_interface *passdb_interface_find(const char *name)
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen{
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen struct passdb_module_interface *const *ifaces;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen
7bd72e4deca3cbf757dd1ea298486d9f3bc24226Timo Sirainen array_foreach(&passdb_interfaces, ifaces) {
7bd72e4deca3cbf757dd1ea298486d9f3bc24226Timo Sirainen struct passdb_module_interface *iface = *ifaces;
7bd72e4deca3cbf757dd1ea298486d9f3bc24226Timo Sirainen
7bd72e4deca3cbf757dd1ea298486d9f3bc24226Timo Sirainen if (strcmp(iface->name, name) == 0)
7bd72e4deca3cbf757dd1ea298486d9f3bc24226Timo Sirainen return iface;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen }
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen return NULL;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen}
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenvoid passdb_register_module(struct passdb_module_interface *iface)
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen{
5c99eaa4e3e07ee065580d163240b4ce95b66befTimo Sirainen struct passdb_module_interface *old_iface;
5c99eaa4e3e07ee065580d163240b4ce95b66befTimo Sirainen
5c99eaa4e3e07ee065580d163240b4ce95b66befTimo Sirainen old_iface = passdb_interface_find(iface->name);
5c99eaa4e3e07ee065580d163240b4ce95b66befTimo Sirainen if (old_iface != NULL && old_iface->verify_plain == NULL) {
5c99eaa4e3e07ee065580d163240b4ce95b66befTimo Sirainen /* replacing a "support not compiled in" passdb */
5c99eaa4e3e07ee065580d163240b4ce95b66befTimo Sirainen passdb_unregister_module(old_iface);
5c99eaa4e3e07ee065580d163240b4ce95b66befTimo Sirainen } else if (old_iface != NULL) {
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen i_panic("passdb_register_module(%s): Already registered",
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen iface->name);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen }
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen array_append(&passdb_interfaces, &iface, 1);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen}
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenvoid passdb_unregister_module(struct passdb_module_interface *iface)
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen{
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen struct passdb_module_interface *const *ifaces;
7bd72e4deca3cbf757dd1ea298486d9f3bc24226Timo Sirainen unsigned int idx;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen
7bd72e4deca3cbf757dd1ea298486d9f3bc24226Timo Sirainen array_foreach(&passdb_interfaces, ifaces) {
7bd72e4deca3cbf757dd1ea298486d9f3bc24226Timo Sirainen if (*ifaces == iface) {
7bd72e4deca3cbf757dd1ea298486d9f3bc24226Timo Sirainen idx = array_foreach_idx(&passdb_interfaces, ifaces);
7bd72e4deca3cbf757dd1ea298486d9f3bc24226Timo Sirainen array_delete(&passdb_interfaces, idx, 1);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen return;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen }
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen }
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen i_panic("passdb_unregister_module(%s): Not registered", iface->name);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen}
1f1e81aab38d833d1c9cdc244c91fd762e0080d4Timo Sirainen
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainenbool passdb_get_credentials(struct auth_request *auth_request,
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen const char *input, const char *input_scheme,
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen const unsigned char **credentials_r, size_t *size_r)
473080c7c0d25ddfdf77e7dfa0ba8f73c6c669d5Timo Sirainen{
a8e132559a7ebe54c8269d79ce29fa3338c76199Timo Sirainen const char *wanted_scheme = auth_request->credentials_scheme;
605c40c77fc3851cb2845da1c5319e32c791592aSergey Kitov const char *plaintext, *error;
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen int ret;
605c40c77fc3851cb2845da1c5319e32c791592aSergey Kitov struct password_generate_params pwd_gen_params;
473080c7c0d25ddfdf77e7dfa0ba8f73c6c669d5Timo Sirainen
430c0b0c370bebeeceba2e206be76bc134742f41Timo Sirainen if (auth_request->prefer_plain_credentials &&
430c0b0c370bebeeceba2e206be76bc134742f41Timo Sirainen password_scheme_is_alias(input_scheme, "PLAIN")) {
430c0b0c370bebeeceba2e206be76bc134742f41Timo Sirainen /* we've a plaintext scheme and we prefer to get it instead
430c0b0c370bebeeceba2e206be76bc134742f41Timo Sirainen of converting it to the fallback scheme */
430c0b0c370bebeeceba2e206be76bc134742f41Timo Sirainen wanted_scheme = "";
430c0b0c370bebeeceba2e206be76bc134742f41Timo Sirainen }
430c0b0c370bebeeceba2e206be76bc134742f41Timo Sirainen
ce6c2809b8a1673372a683716566d973efd2f6eeTimo Sirainen ret = password_decode(input, input_scheme,
ce6c2809b8a1673372a683716566d973efd2f6eeTimo Sirainen credentials_r, size_r, &error);
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen if (ret <= 0) {
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen if (ret < 0) {
6135260095e1704ed6edff9d00bdfc043c11429cTimo Sirainen auth_request_log_error(auth_request, AUTH_SUBSYS_DB,
ce6c2809b8a1673372a683716566d973efd2f6eeTimo Sirainen "Password data is not valid for scheme %s: %s",
ce6c2809b8a1673372a683716566d973efd2f6eeTimo Sirainen input_scheme, error);
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen } else {
6135260095e1704ed6edff9d00bdfc043c11429cTimo Sirainen auth_request_log_error(auth_request, AUTH_SUBSYS_DB,
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen "Unknown scheme %s", input_scheme);
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen }
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen return FALSE;
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen }
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen
b4f2560c29dacd066ba89e782d95ceed7ac473a3Timo Sirainen if (*wanted_scheme == '\0') {
b4f2560c29dacd066ba89e782d95ceed7ac473a3Timo Sirainen /* anything goes. change the credentials_scheme to what we
b4f2560c29dacd066ba89e782d95ceed7ac473a3Timo Sirainen actually got, so blocking passdbs work. */
b4f2560c29dacd066ba89e782d95ceed7ac473a3Timo Sirainen auth_request->credentials_scheme =
1479a685cdb1641783ac02ba135450929f5c2658Timo Sirainen p_strdup(auth_request->pool, t_strcut(input_scheme, '.'));
b4f2560c29dacd066ba89e782d95ceed7ac473a3Timo Sirainen return TRUE;
b4f2560c29dacd066ba89e782d95ceed7ac473a3Timo Sirainen }
b4f2560c29dacd066ba89e782d95ceed7ac473a3Timo Sirainen
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen if (!password_scheme_is_alias(input_scheme, wanted_scheme)) {
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen if (!password_scheme_is_alias(input_scheme, "PLAIN")) {
ac713658d206e8d001fef7c0e36945793f2eb942Timo Sirainen const char *error = t_strdup_printf(
49e513d090753ccbf95560b2f3a21f081a5b6c51Timo Sirainen "Requested %s scheme, but we have only %s",
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen wanted_scheme, input_scheme);
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen if (auth_request->set->debug_passwords) {
ac713658d206e8d001fef7c0e36945793f2eb942Timo Sirainen error = t_strdup_printf("%s (input: %s)",
ac713658d206e8d001fef7c0e36945793f2eb942Timo Sirainen error, input);
ac713658d206e8d001fef7c0e36945793f2eb942Timo Sirainen }
6135260095e1704ed6edff9d00bdfc043c11429cTimo Sirainen auth_request_log_info(auth_request, AUTH_SUBSYS_DB,
ac713658d206e8d001fef7c0e36945793f2eb942Timo Sirainen "%s", error);
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen return FALSE;
473080c7c0d25ddfdf77e7dfa0ba8f73c6c669d5Timo Sirainen }
517d1e7142d57299c733b30423e35e7e1f8d01d6Timo Sirainen
517d1e7142d57299c733b30423e35e7e1f8d01d6Timo Sirainen /* we can generate anything out of plaintext passwords */
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen plaintext = t_strndup(*credentials_r, *size_r);
605c40c77fc3851cb2845da1c5319e32c791592aSergey Kitov i_zero(&pwd_gen_params);
605c40c77fc3851cb2845da1c5319e32c791592aSergey Kitov pwd_gen_params.user = auth_request->original_username;
446e518e4fe86ff40e33543445f4e99edf840a21Timo Sirainen if (!auth_request->domain_is_realm &&
605c40c77fc3851cb2845da1c5319e32c791592aSergey Kitov strchr(pwd_gen_params.user, '@') != NULL) {
446e518e4fe86ff40e33543445f4e99edf840a21Timo Sirainen /* domain must not be used as realm. add the @realm. */
605c40c77fc3851cb2845da1c5319e32c791592aSergey Kitov pwd_gen_params.user = t_strconcat(pwd_gen_params.user, "@",
446e518e4fe86ff40e33543445f4e99edf840a21Timo Sirainen auth_request->realm, NULL);
446e518e4fe86ff40e33543445f4e99edf840a21Timo Sirainen }
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen if (auth_request->set->debug_passwords) {
6135260095e1704ed6edff9d00bdfc043c11429cTimo Sirainen auth_request_log_debug(auth_request, AUTH_SUBSYS_DB,
446e518e4fe86ff40e33543445f4e99edf840a21Timo Sirainen "Generating %s from user '%s', password '%s'",
605c40c77fc3851cb2845da1c5319e32c791592aSergey Kitov wanted_scheme, pwd_gen_params.user, plaintext);
d368bfd671ae6d04a69eb7f418521d49b8bbf77aTimo Sirainen }
605c40c77fc3851cb2845da1c5319e32c791592aSergey Kitov if (!password_generate(plaintext, &pwd_gen_params,
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen wanted_scheme, credentials_r, size_r)) {
6135260095e1704ed6edff9d00bdfc043c11429cTimo Sirainen auth_request_log_error(auth_request, AUTH_SUBSYS_DB,
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen "Requested unknown scheme %s", wanted_scheme);
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen return FALSE;
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen }
473080c7c0d25ddfdf77e7dfa0ba8f73c6c669d5Timo Sirainen }
473080c7c0d25ddfdf77e7dfa0ba8f73c6c669d5Timo Sirainen
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen return TRUE;
a3dd97fb6d92a89c3de0597fed2d4b044c7aeb84Timo Sirainen}
a3dd97fb6d92a89c3de0597fed2d4b044c7aeb84Timo Sirainen
f968e62caa52a8924bd05ebf76ff515b5c18e17bTimo Sirainenvoid passdb_handle_credentials(enum passdb_result result,
a3dd97fb6d92a89c3de0597fed2d4b044c7aeb84Timo Sirainen const char *password, const char *scheme,
a3dd97fb6d92a89c3de0597fed2d4b044c7aeb84Timo Sirainen lookup_credentials_callback_t *callback,
a3dd97fb6d92a89c3de0597fed2d4b044c7aeb84Timo Sirainen struct auth_request *auth_request)
a3dd97fb6d92a89c3de0597fed2d4b044c7aeb84Timo Sirainen{
5367840b91df098e016f382960c391691c8d33ffTimo Sirainen const unsigned char *credentials = NULL;
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen size_t size = 0;
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen
f968e62caa52a8924bd05ebf76ff515b5c18e17bTimo Sirainen if (result != PASSDB_RESULT_OK) {
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen callback(result, NULL, 0, auth_request);
f968e62caa52a8924bd05ebf76ff515b5c18e17bTimo Sirainen return;
448e068f2fe3904e18656d730e2b7cf0e6572fc1Aki Tuomi } else if (auth_fields_exists(auth_request->extra_fields, "noauthenticate")) {
448e068f2fe3904e18656d730e2b7cf0e6572fc1Aki Tuomi callback(PASSDB_RESULT_NEXT, NULL, 0, auth_request);
448e068f2fe3904e18656d730e2b7cf0e6572fc1Aki Tuomi return;
f968e62caa52a8924bd05ebf76ff515b5c18e17bTimo Sirainen }
a3dd97fb6d92a89c3de0597fed2d4b044c7aeb84Timo Sirainen
b24ffea8baa472d9b542e54ed3f9939eefd020adTimo Sirainen if (password != NULL) {
b24ffea8baa472d9b542e54ed3f9939eefd020adTimo Sirainen if (!passdb_get_credentials(auth_request, password, scheme,
b24ffea8baa472d9b542e54ed3f9939eefd020adTimo Sirainen &credentials, &size))
b24ffea8baa472d9b542e54ed3f9939eefd020adTimo Sirainen result = PASSDB_RESULT_SCHEME_NOT_AVAILABLE;
b24ffea8baa472d9b542e54ed3f9939eefd020adTimo Sirainen } else if (*auth_request->credentials_scheme == '\0') {
b24ffea8baa472d9b542e54ed3f9939eefd020adTimo Sirainen /* We're doing a passdb lookup (not authenticating).
b24ffea8baa472d9b542e54ed3f9939eefd020adTimo Sirainen Pass through a NULL password without an error. */
7d26aee0c0b6c0ce227ef4ae4f20fc86e2c423f2Timo Sirainen } else if (auth_request->delayed_credentials != NULL) {
7d26aee0c0b6c0ce227ef4ae4f20fc86e2c423f2Timo Sirainen /* We already have valid credentials from an earlier
7d26aee0c0b6c0ce227ef4ae4f20fc86e2c423f2Timo Sirainen passdb lookup. auth_request_lookup_credentials_finish()
7d26aee0c0b6c0ce227ef4ae4f20fc86e2c423f2Timo Sirainen will use them. */
b24ffea8baa472d9b542e54ed3f9939eefd020adTimo Sirainen } else {
6135260095e1704ed6edff9d00bdfc043c11429cTimo Sirainen auth_request_log_info(auth_request, AUTH_SUBSYS_DB,
4ed1b49d815ec41a5e4b6a23d23e94b958da1923Timo Sirainen "Requested %s scheme, but we have a NULL password",
4ed1b49d815ec41a5e4b6a23d23e94b958da1923Timo Sirainen auth_request->credentials_scheme);
a3dd97fb6d92a89c3de0597fed2d4b044c7aeb84Timo Sirainen result = PASSDB_RESULT_SCHEME_NOT_AVAILABLE;
4ed1b49d815ec41a5e4b6a23d23e94b958da1923Timo Sirainen }
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen
b44650b0f48a4b5f0dc240ed836833a00b643b9fTimo Sirainen callback(result, credentials, size, auth_request);
473080c7c0d25ddfdf77e7dfa0ba8f73c6c669d5Timo Sirainen}
473080c7c0d25ddfdf77e7dfa0ba8f73c6c669d5Timo Sirainen
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainenstatic struct passdb_module *
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainenpassdb_find(const char *driver, const char *args, unsigned int *idx_r)
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen{
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen struct passdb_module *const *passdbs;
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen unsigned int i, count;
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen passdbs = array_get(&passdb_modules, &count);
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen for (i = 0; i < count; i++) {
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen if (strcmp(passdbs[i]->iface.name, driver) == 0 &&
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen strcmp(passdbs[i]->args, args) == 0) {
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen *idx_r = i;
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen return passdbs[i];
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen }
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen }
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen return NULL;
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen}
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen
e48d89622047bd8bbd0475b881ca9377d592f535Timo Sirainenstruct passdb_module *
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainenpassdb_preinit(pool_t pool, const struct auth_passdb_settings *set)
25757faf029c369a8318349dafe952e2358df1d8Timo Sirainen{
3cf67672fdc87583cb23ce088c95bb5dee60e74dTimo Sirainen static unsigned int auth_passdb_id = 0;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen struct passdb_module_interface *iface;
e48d89622047bd8bbd0475b881ca9377d592f535Timo Sirainen struct passdb_module *passdb;
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen unsigned int idx;
0727e38ac12efb8963a339daf56255e2be1f29fcTimo Sirainen
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainen iface = passdb_interface_find(set->driver);
8ff9812659728d4166df8e003a1dd3524ae8514eTimo Sirainen if (iface == NULL || iface->verify_plain == NULL) {
966cb0c1aa58578339cea6f79b4a423a851ab074Timo Sirainen /* maybe it's a plugin. try to load it. */
966cb0c1aa58578339cea6f79b4a423a851ab074Timo Sirainen auth_module_load(t_strconcat("authdb_", set->driver, NULL));
966cb0c1aa58578339cea6f79b4a423a851ab074Timo Sirainen iface = passdb_interface_find(set->driver);
966cb0c1aa58578339cea6f79b4a423a851ab074Timo Sirainen }
d5abbb932a0a598f002da39a8b3326643b1b5efcTimo Sirainen if (iface == NULL)
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainen i_fatal("Unknown passdb driver '%s'", set->driver);
d5abbb932a0a598f002da39a8b3326643b1b5efcTimo Sirainen if (iface->verify_plain == NULL) {
d5abbb932a0a598f002da39a8b3326643b1b5efcTimo Sirainen i_fatal("Support not compiled in for passdb driver '%s'",
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainen set->driver);
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainen }
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainen if (iface->preinit == NULL && iface->init == NULL &&
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainen *set->args != '\0') {
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainen i_fatal("passdb %s: No args are supported: %s",
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainen set->driver, set->args);
747e77e3ab073a8e9e69c7a3e71b4593c5655d03Timo Sirainen }
dd93aba1901a457346990f49c54a738947dc7128Timo Sirainen
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainen passdb = passdb_find(set->driver, set->args, &idx);
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen if (passdb != NULL)
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen return passdb;
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen
e48d89622047bd8bbd0475b881ca9377d592f535Timo Sirainen if (iface->preinit == NULL)
e48d89622047bd8bbd0475b881ca9377d592f535Timo Sirainen passdb = p_new(pool, struct passdb_module, 1);
e48d89622047bd8bbd0475b881ca9377d592f535Timo Sirainen else
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainen passdb = iface->preinit(pool, set->args);
e48d89622047bd8bbd0475b881ca9377d592f535Timo Sirainen passdb->id = ++auth_passdb_id;
e48d89622047bd8bbd0475b881ca9377d592f535Timo Sirainen passdb->iface = *iface;
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainen passdb->args = p_strdup(pool, set->args);
10f6f2224c897fc543973efd2f46b86a3ab1148dAki Tuomi if (*set->mechanisms == '\0') {
10f6f2224c897fc543973efd2f46b86a3ab1148dAki Tuomi passdb->mechanisms = NULL;
10f6f2224c897fc543973efd2f46b86a3ab1148dAki Tuomi } else if (strcasecmp(set->mechanisms, "none") == 0) {
10f6f2224c897fc543973efd2f46b86a3ab1148dAki Tuomi passdb->mechanisms = (const char *const[]){NULL};
10f6f2224c897fc543973efd2f46b86a3ab1148dAki Tuomi } else {
10f6f2224c897fc543973efd2f46b86a3ab1148dAki Tuomi passdb->mechanisms = (const char* const*)p_strsplit_spaces(pool, set->mechanisms, " ,");
10f6f2224c897fc543973efd2f46b86a3ab1148dAki Tuomi }
04052d7cacaa866a3f00afb4e104fa46c04c1dd7Timo Sirainen
268a76700330d159c805c70d1e3eae2e21f1cb9eAki Tuomi if (*set->username_filter == '\0') {
268a76700330d159c805c70d1e3eae2e21f1cb9eAki Tuomi passdb->username_filter = NULL;
268a76700330d159c805c70d1e3eae2e21f1cb9eAki Tuomi } else {
268a76700330d159c805c70d1e3eae2e21f1cb9eAki Tuomi passdb->username_filter = (const char* const*)p_strsplit_spaces(pool, set->username_filter, " ,");
268a76700330d159c805c70d1e3eae2e21f1cb9eAki Tuomi }
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen array_append(&passdb_modules, &passdb, 1);
e48d89622047bd8bbd0475b881ca9377d592f535Timo Sirainen return passdb;
25757faf029c369a8318349dafe952e2358df1d8Timo Sirainen}
25757faf029c369a8318349dafe952e2358df1d8Timo Sirainen
f3d506e525a720f214020ca0f989a1966b30edaeTimo Sirainenvoid passdb_init(struct passdb_module *passdb)
08aea01ef9a9d20703e0fcf8618e6195c0037a44Timo Sirainen{
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen if (passdb->iface.init != NULL && passdb->init_refcount == 0)
f3d506e525a720f214020ca0f989a1966b30edaeTimo Sirainen passdb->iface.init(passdb);
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen passdb->init_refcount++;
08aea01ef9a9d20703e0fcf8618e6195c0037a44Timo Sirainen}
08aea01ef9a9d20703e0fcf8618e6195c0037a44Timo Sirainen
849969f639a00eab26791db3cb1b66430420c0cdTimo Sirainenvoid passdb_deinit(struct passdb_module *passdb)
25757faf029c369a8318349dafe952e2358df1d8Timo Sirainen{
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen unsigned int idx;
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen i_assert(passdb->init_refcount > 0);
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen if (--passdb->init_refcount > 0)
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen return;
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen if (passdb_find(passdb->iface.name, passdb->args, &idx) == NULL)
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen i_unreached();
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen array_delete(&passdb_modules, idx, 1);
e48d89622047bd8bbd0475b881ca9377d592f535Timo Sirainen
849969f639a00eab26791db3cb1b66430420c0cdTimo Sirainen if (passdb->iface.deinit != NULL)
849969f639a00eab26791db3cb1b66430420c0cdTimo Sirainen passdb->iface.deinit(passdb);
9d75363d3fbabc2fbc2d80f06672e3ed8965804aTimo Sirainen
9d75363d3fbabc2fbc2d80f06672e3ed8965804aTimo Sirainen /* make sure passdb isn't accessed again */
9d75363d3fbabc2fbc2d80f06672e3ed8965804aTimo Sirainen passdb->iface = passdb_iface_deinit;
25757faf029c369a8318349dafe952e2358df1d8Timo Sirainen}
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen
9625595c47c665f5aee57ebfcb1fcbe9ad1bf3a0Martti Rannanjärvivoid passdbs_generate_md5(unsigned char md5[STATIC_ARRAY MD5_RESULTLEN])
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen{
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen struct md5_context ctx;
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen struct passdb_module *const *passdbs;
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen unsigned int i, count;
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen md5_init(&ctx);
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen passdbs = array_get(&passdb_modules, &count);
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen for (i = 0; i < count; i++) {
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen md5_update(&ctx, &passdbs[i]->id, sizeof(passdbs[i]->id));
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen md5_update(&ctx, passdbs[i]->iface.name,
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen strlen(passdbs[i]->iface.name));
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen md5_update(&ctx, passdbs[i]->args, strlen(passdbs[i]->args));
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen }
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen md5_final(&ctx, md5);
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen}
be5c76fabc7439fd33bc799bc3ab3f570799977bTimo Sirainen
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenextern struct passdb_module_interface passdb_passwd;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenextern struct passdb_module_interface passdb_bsdauth;
2028d80c2704bbf62b29b2c624b0ee3c3a03c462Timo Sirainenextern struct passdb_module_interface passdb_dict;
9698cd24356147d8a5471260062ea7e10e692fdfAki Tuomi#ifdef HAVE_LUA
9698cd24356147d8a5471260062ea7e10e692fdfAki Tuomiextern struct passdb_module_interface passdb_lua;
9698cd24356147d8a5471260062ea7e10e692fdfAki Tuomi#endif
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenextern struct passdb_module_interface passdb_shadow;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenextern struct passdb_module_interface passdb_passwd_file;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenextern struct passdb_module_interface passdb_pam;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenextern struct passdb_module_interface passdb_checkpassword;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenextern struct passdb_module_interface passdb_vpopmail;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenextern struct passdb_module_interface passdb_ldap;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenextern struct passdb_module_interface passdb_sql;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenextern struct passdb_module_interface passdb_sia;
1a669829132a4b68aaba32400e28bb2a4e19bcaaTimo Sirainenextern struct passdb_module_interface passdb_static;
9b670175445a75987a713ff899d1a945255b0b5bAki Tuomiextern struct passdb_module_interface passdb_oauth2;
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenvoid passdbs_init(void)
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen{
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen i_array_init(&passdb_interfaces, 16);
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen i_array_init(&passdb_modules, 16);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen passdb_register_module(&passdb_passwd);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen passdb_register_module(&passdb_bsdauth);
2028d80c2704bbf62b29b2c624b0ee3c3a03c462Timo Sirainen passdb_register_module(&passdb_dict);
9698cd24356147d8a5471260062ea7e10e692fdfAki Tuomi#ifdef HAVE_LUA
9698cd24356147d8a5471260062ea7e10e692fdfAki Tuomi passdb_register_module(&passdb_lua);
9698cd24356147d8a5471260062ea7e10e692fdfAki Tuomi#endif
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen passdb_register_module(&passdb_passwd_file);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen passdb_register_module(&passdb_pam);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen passdb_register_module(&passdb_checkpassword);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen passdb_register_module(&passdb_shadow);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen passdb_register_module(&passdb_vpopmail);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen passdb_register_module(&passdb_ldap);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen passdb_register_module(&passdb_sql);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen passdb_register_module(&passdb_sia);
1a669829132a4b68aaba32400e28bb2a4e19bcaaTimo Sirainen passdb_register_module(&passdb_static);
9b670175445a75987a713ff899d1a945255b0b5bAki Tuomi passdb_register_module(&passdb_oauth2);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen}
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainenvoid passdbs_deinit(void)
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen{
9ed2951bd0bb1878a27437d7c00611b2baadd614Timo Sirainen array_free(&passdb_modules);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen array_free(&passdb_interfaces);
43a66a0b16299bd4f7615acd85e98bd3832c54d5Timo Sirainen}