Home | History | Annotate | Download | only in sshd
      1 /*
      2  * Copyright (c) 2002 Chris Adams.  All rights reserved.
      3  *
      4  * Redistribution and use in source and binary forms, with or without
      5  * modification, are permitted provided that the following conditions
      6  * are met:
      7  * 1. Redistributions of source code must retain the above copyright
      8  *    notice, this list of conditions and the following disclaimer.
      9  * 2. Redistributions in binary form must reproduce the above copyright
     10  *    notice, this list of conditions and the following disclaimer in the
     11  *    documentation and/or other materials provided with the distribution.
     12  *
     13  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
     14  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
     15  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
     16  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
     17  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
     18  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
     19  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
     20  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     21  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
     22  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
     23  */
     24 
     25 #include "includes.h"
     26 
     27 #ifdef HAVE_OSF_SIA
     28 #include "ssh.h"
     29 #include "auth.h"
     30 #include "auth-sia.h"
     31 #include "log.h"
     32 #include "servconf.h"
     33 #include "canohost.h"
     34 
     35 #include <sia.h>
     36 #include <siad.h>
     37 #include <pwd.h>
     38 #include <signal.h>
     39 #include <setjmp.h>
     40 #include <sys/resource.h>
     41 #include <unistd.h>
     42 #include <string.h>
     43 
     44 extern ServerOptions options;
     45 extern int saved_argc;
     46 extern char **saved_argv;
     47 
     48 extern int errno;
     49 
     50 int
     51 auth_sia_password(Authctxt *authctxt, char *pass)
     52 {
     53 	int ret;
     54 	SIAENTITY *ent = NULL;
     55 	const char *host;
     56 	char *user = authctxt->user;
     57 
     58 	host = get_canonical_hostname(options.verify_reverse_mapping);
     59 
     60 	if (!user || !pass || pass[0] == '\0')
     61 		return(0);
     62 
     63 	if (sia_ses_init(&ent, saved_argc, saved_argv, host, user, NULL, 0,
     64 	    NULL) != SIASUCCESS)
     65 		return(0);
     66 
     67 	if ((ret = sia_ses_authent(NULL, pass, ent)) != SIASUCCESS) {
     68 		error("Couldn't authenticate %s from %s", user, host);
     69 		if (ret & SIASTOP)
     70 			sia_ses_release(&ent);
     71 		return(0);
     72 	}
     73 
     74 	sia_ses_release(&ent);
     75 
     76 	return(1);
     77 }
     78 
     79 void
     80 session_setup_sia(char *user, char *tty)
     81 {
     82 	struct passwd *pw;
     83 	SIAENTITY *ent = NULL;
     84 	const char *host;
     85 
     86 	host = get_canonical_hostname (options.verify_reverse_mapping);
     87 
     88 	if (sia_ses_init(&ent, saved_argc, saved_argv, host, user, tty, 0,
     89 	    NULL) != SIASUCCESS) {
     90 		fatal("sia_ses_init failed");
     91 	}
     92 
     93 	if ((pw = getpwnam(user)) == NULL) {
     94 		sia_ses_release(&ent);
     95 		fatal("getpwnam: no user: %s", user);
     96 	}
     97 	if (sia_make_entity_pwd(pw, ent) != SIASUCCESS) {
     98 		sia_ses_release(&ent);
     99 		fatal("sia_make_entity_pwd failed");
    100 	}
    101 
    102 	ent->authtype = SIA_A_NONE;
    103 	if (sia_ses_estab(sia_collect_trm, ent) != SIASUCCESS) {
    104 		fatal("Couldn't establish session for %s from %s", user,
    105 		    host);
    106 	}
    107 
    108 	if (setpriority(PRIO_PROCESS, 0, 0) == -1) {
    109 		sia_ses_release(&ent);
    110 		fatal("setpriority: %s", strerror (errno));
    111 	}
    112 
    113 	if (sia_ses_launch(sia_collect_trm, ent) != SIASUCCESS) {
    114 		fatal("Couldn't launch session for %s from %s", user, host);
    115 	}
    116 
    117 	sia_ses_release(&ent);
    118 
    119 	if (setreuid(geteuid(), geteuid()) < 0) {
    120 		fatal("setreuid: %s", strerror(errno));
    121 	}
    122 }
    123 
    124 #endif /* HAVE_OSF_SIA */
    125 
    126 #pragma ident	"%Z%%M%	%I%	%E% SMI"
    127