script-login.c revision bf27c70b784ed67e324ddfe1ad4f46bf571d3a09
32N/A/* Copyright (c) 2009-2010 Dovecot authors, see the included COPYING file */
32N/A
1356N/A#include "lib.h"
32N/A#include "env-util.h"
32N/A#include "execv-const.h"
919N/A#include "fdpass.h"
919N/A#include "restrict-access.h"
919N/A#include "str.h"
919N/A#include "strescape.h"
919N/A#include "settings-parser.h"
919N/A#include "mail-storage-service.h"
919N/A#include "master-interface.h"
919N/A#include "master-service.h"
919N/A#include "master-service-settings.h"
919N/A
919N/A#include <stdlib.h>
919N/A#include <unistd.h>
919N/A
919N/A#define SCRIPT_LOGIN_PROTOCOL_VERSION_MAJOR 1
919N/A#define SCRIPT_LOGIN_READ_TIMEOUT_SECS 10
919N/A#define ENV_USERDB_KEYS "USERDB_KEYS"
919N/A#define SCRIPT_COMM_FD 3
32N/A
32N/Astatic const char **exec_args;
32N/Astatic bool drop_privileges = FALSE;
32N/A
493N/Astatic void client_connected(struct master_service_connection *conn)
32N/A{
32N/A enum mail_storage_service_flags flags =
1276N/A MAIL_STORAGE_SERVICE_FLAG_NO_PLUGINS;
32N/A string_t *instr, *keys;
911N/A const char **args, *key, *value, *error, *version_line, *data_line;
1276N/A struct mail_storage_service_ctx *service_ctx;
1276N/A struct mail_storage_service_input input;
1276N/A struct mail_storage_service_user *user;
911N/A char buf[1024];
32N/A unsigned int i, socket_count;
32N/A int fd = -1;
32N/A ssize_t ret;
1356N/A
1356N/A alarm(SCRIPT_LOGIN_READ_TIMEOUT_SECS);
1356N/A
32N/A net_set_nonblock(conn->fd, FALSE);
32N/A instr = t_str_new(1024);
ret = fd_read(conn->fd, buf, sizeof(buf), &fd);
while (ret > 0) {
str_append_n(instr, buf, ret);
if (buf[ret-1] == '\n' &&
strchr(str_c(instr), '\n')[1] != '\0') {
str_truncate(instr, str_len(instr)-1);
break;
}
ret = read(conn->fd, buf, sizeof(buf));
}
version_line = str_c(instr);
data_line = strchr(version_line, '\n');
if (data_line != NULL)
version_line = t_strdup_until(version_line, data_line++);
else
version_line = NULL;
if (ret > 0 || version_line != NULL) {
if (version_line == NULL ||
!version_string_verify(version_line, "script-login",
SCRIPT_LOGIN_PROTOCOL_VERSION_MAJOR)) {
i_fatal("Client not compatible with this binary "
"(connecting to wrong socket?)");
}
}
if (ret <= 0) {
if (ret < 0)
i_fatal("read() failed: %m");
else
i_fatal("read() failed: disconnected");
}
if (fd == -1)
i_fatal("client fd not received");
/* put everything to environment */
env_clean();
keys = t_str_new(256);
args = t_strsplit(data_line, "\t");
if (str_array_length(args) < 3)
i_fatal("Missing input fields");
i = 0;
memset(&input, 0, sizeof(input));
input.module = "mail"; /* need to get mail_uid, mail_gid */
input.service = "script-login";
(void)net_addr2ip(args[i++], &input.local_ip);
(void)net_addr2ip(args[i++], &input.remote_ip);
input.username = args[i++];
input.userdb_fields = args + i;
env_put(t_strconcat("LOCAL_IP=", net_ip2addr(&input.local_ip), NULL));
env_put(t_strconcat("IP=", net_ip2addr(&input.remote_ip), NULL));
env_put(t_strconcat("USER=", input.username, NULL));
for (; args[i] != '\0'; i++) {
args[i] = str_tabunescape(t_strdup_noconst(args[i]));
value = strchr(args[i], '=');
if (value != NULL) {
key = t_str_ucase(t_strdup_until(args[i], value));
env_put(t_strconcat(key, value, NULL));
str_printfa(keys, "%s ", key);
}
}
env_put(t_strconcat(ENV_USERDB_KEYS"=", str_c(keys), NULL));
master_service_init_log(master_service,
t_strdup_printf("script-login(%s): ", input.username));
service_ctx = mail_storage_service_init(master_service, NULL, flags);
if (mail_storage_service_lookup(service_ctx, &input, &user, &error) <= 0)
i_fatal("%s", error);
mail_storage_service_restrict_setenv(service_ctx, user);
if (drop_privileges)
restrict_access_by_env(getenv("HOME"), TRUE);
if (dup2(fd, STDIN_FILENO) < 0)
i_fatal("dup2() failed: %m");
if (dup2(fd, STDOUT_FILENO) < 0)
i_fatal("dup2() failed: %m");
if (conn->fd != SCRIPT_COMM_FD) {
if (dup2(conn->fd, SCRIPT_COMM_FD) < 0)
i_fatal("dup2() failed: %m");
}
/* close all listener sockets */
socket_count = master_service_get_socket_count(master_service);
for (i = 0; i < socket_count; i++) {
if (close(MASTER_LISTEN_FD_FIRST + i) < 0)
i_error("close(listener) failed: %m");
}
if (close(MASTER_STATUS_FD) < 0)
i_error("close(status) failed: %m");
execvp_const(exec_args[0], exec_args);
}
static void script_execute_finish(void)
{
const char *keys_str, *username, *const *keys, *value;
string_t *reply = t_str_new(512);
ssize_t ret;
keys_str = getenv(ENV_USERDB_KEYS);
if (keys_str == NULL)
i_fatal(ENV_USERDB_KEYS" environment missing");
username = getenv("USER");
if (username == NULL)
i_fatal("USER environment missing");
str_append(reply, username);
for (keys = t_strsplit_spaces(keys_str, " "); *keys != NULL; keys++) {
value = getenv(t_str_ucase(*keys));
if (value != NULL) {
str_append_c(reply, '\t');
str_tabescape_write(reply,
t_strconcat(t_str_lcase(*keys), "=",
value, NULL));
}
}
str_append_c(reply, '\n');
ret = fd_send(SCRIPT_COMM_FD, STDOUT_FILENO,
str_data(reply), str_len(reply));
if (ret < 0)
i_fatal("fd_send() failed: %m");
else if (ret != (ssize_t)str_len(reply))
i_fatal("fd_send() sent partial output");
}
int main(int argc, char *argv[])
{
enum master_service_flags flags = 0;
int i, c;
if (getenv(MASTER_UID_ENV) == NULL)
flags |= MASTER_SERVICE_FLAG_STANDALONE;
master_service = master_service_init("script-login", flags,
&argc, &argv, "d");
while ((c = master_getopt(master_service)) > 0) {
switch (c) {
case 'd':
drop_privileges = TRUE;
break;
default:
return FATAL_DEFAULT;
}
}
argc -= optind;
argv += optind;
master_service_init_log(master_service, "script-login: ");
master_service_init_finish(master_service);
master_service_set_service_count(master_service, 1);
if ((flags & MASTER_SERVICE_FLAG_STANDALONE) != 0)
script_execute_finish();
else {
if (argv[0] == NULL)
i_fatal("Missing script path");
exec_args = i_new(const char *, argc + 2);
for (i = 0; i < argc; i++)
exec_args[i] = argv[i];
exec_args[i] = PKG_LIBEXECDIR"/script-login";
exec_args[i+1] = NULL;
if (exec_args[0][0] != '/') {
exec_args[0] = t_strconcat(PKG_LIBEXECDIR"/",
exec_args[0], NULL);
}
master_service_run(master_service, client_connected);
}
master_service_deinit(&master_service);
return 0;
}