1 /* ========================================================================

2 * Copyright 1988-2006 University of Washington

3 *

4 * Licensed under the Apache License, Version 2.0 (the "License");

5 * you may not use this file except in compliance with the License.

6 * You may obtain a copy of the License at

7 *

8 * http://www.apache.org/licenses/LICENSE-2.0

9 *

10 *

11 * ========================================================================

12 */

13

14 /*

15 * Program: AFS check password

16 *

17 * Author: Mark Crispin

18 * Networks and Distributed Computing

19 * Computing & Communications

20 * University of Washington

21 * Administration Building, AG-44

22 * Seattle, WA 98195

23 * Internet: MRC@CAC.Washington.EDU

24 *

25 * Date: 1 August 1988

26 * Last Edited: 30 August 2006

27 */

28 

29 /* AFS cleanup

30 * Accepts: data

31 */

32

33 void checkpw_cleanup (void *data)

34 {

35 ktc_ForgetAllTokens ();

36 }

37

38

39 /* Check password

40 * Accepts: login passwd struct

41 * password string

42 * argument count

43 * argument vector

44 * Returns: passwd struct if password validated, NIL otherwise

45 */

46

47 #undef INIT

48 #define min AFS_MIN

49 #define max AFS_MAX

50 #include <afs/param.h>

51 #include <afs/kautils.h>

52

53 struct passwd *checkpw (struct passwd *pw,char *pass,int argc,char *argv[])

54 {

55 char *reason;

56 /* faster validation for POP servers */

57 if (!strcmp ((char *) mail_parameters (NIL,GET_SERVICENAME,NIL),"pop")) {

58 struct ktc_encryptionKey key;

59 struct ktc_token token;

60 /* just check the password */

61 ka_StringToKey (pass,NIL,&key);

62 if (ka_GetAdminToken (pw->pw_name,"","",&key,600,&token,1)) return NIL;

63 }

64 /* check password and get AFS token */

65 else if (ka_UserAuthenticateGeneral

66 (KA_USERAUTH_VERSION + KA_USERAUTH_DOSETPAG,pw->pw_name,NIL,NIL,

67 pass,0,0,0,&reason)) return NIL;

68 /* arm hook to delete credentials */

69 mail_parameters (NIL,SET_LOGOUTHOOK,(void *) checkpw_cleanup);

70 return pw;

71 }