1/*
2 * Copyright (C) 1998 Christian Esken <esken@kde.org>
3 * Copyright (C) 2003 Oswald Buddenhagen <ossi@kde.org>
4 *
5 * This is a modified version of checkpass_shadow.cpp
6 *
7 * Modifications made by Thorsten Kukuk <kukuk@suse.de>
8 * Mathias Kettner <kettner@suse.de>
9 *
10 * ------------------------------------------------------------
11 *
12 * This program is free software; you can redistribute it and/or
13 * modify it under the terms of the GNU General Public
14 * License as published by the Free Software Foundation; either
15 * version 2 of the License, or (at your option) any later version.
16 *
17 * This program is distributed in the hope that it will be useful,
18 * but WITHOUT ANY WARRANTY; without even the implied warranty of
19 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
20 * General Public License for more details.
21 *
22 * You should have received a copy of the GNU General Public
23 * License along with this program; if not, write to the Free
24 * Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
25 */
26
27#include "kcheckpass.h"
28
29/*******************************************************************
30 * This is the authentication code for Shadow-Passwords
31 *******************************************************************/
32
33#ifdef HAVE_SHADOW
34#include <string.h>
35#include <stdlib.h>
36#include <pwd.h>
37
38#ifndef __hpux
39#include <shadow.h>
40#endif
41
42AuthReturn Authenticate(const char *method,
43 const char *login, char *(*conv) (ConvRequest, const char *))
44{
45 char *typed_in_password;
46 char *crpt_passwd;
47 char *password;
48 struct passwd *pw;
49 struct spwd *spw;
50
51 if (strcmp(method, "classic"))
52 return AuthError;
53
54 if (!(pw = getpwnam(login)))
55 return AuthAbort;
56
57 spw = getspnam(login);
58 password = spw ? spw->sp_pwdp : pw->pw_passwd;
59
60 if (!*password)
61 return AuthOk;
62
63 if (!(typed_in_password = conv(ConvGetHidden, 0)))
64 return AuthAbort;
65
66#if defined( __linux__ ) && defined( HAVE_PW_ENCRYPT )
67 crpt_passwd = pw_encrypt(typed_in_password, password); /* (1) */
68#else
69 crpt_passwd = crypt(typed_in_password, password);
70#endif
71
72 if (crpt_passwd && !strcmp(password, crpt_passwd )) {
73 dispose(typed_in_password);
74 return AuthOk; /* Success */
75 }
76 dispose(typed_in_password);
77 return AuthBad; /* Password wrong or account locked */
78}
79
80/*
81 (1) Deprecated - long passwords have known weaknesses. Also,
82 pw_encrypt is non-standard (requires libshadow.a) while
83 everything else you need to support shadow passwords is in
84 the standard (ELF) libc.
85 */
86#endif
87