mirror of https://github.com/yandex/odyssey.git
93 lines
1.8 KiB
C
93 lines
1.8 KiB
C
|
|
/*
|
|
* Odyssey.
|
|
*
|
|
* Scalable PostgreSQL connection pooler.
|
|
*/
|
|
|
|
#include <stdlib.h>
|
|
#include <stdarg.h>
|
|
#include <stdint.h>
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <ctype.h>
|
|
#include <inttypes.h>
|
|
#include <assert.h>
|
|
|
|
#include <security/pam_appl.h>
|
|
|
|
#include <kiwi.h>
|
|
#include <odyssey.h>
|
|
|
|
static int
|
|
od_pam_conversation(int msgc,
|
|
const struct pam_message **msgv,
|
|
struct pam_response **rspv,
|
|
void *authdata)
|
|
{
|
|
char *password = (char *)authdata;
|
|
if (msgc < 1 || msgv == NULL || password == NULL)
|
|
return PAM_CONV_ERR;
|
|
|
|
*rspv = malloc(msgc * sizeof(struct pam_response));
|
|
if (*rspv == NULL)
|
|
return PAM_CONV_ERR;
|
|
memset(*rspv, 0, msgc * sizeof(struct pam_response));
|
|
|
|
int rc = PAM_SUCCESS;
|
|
int counter = 0;
|
|
for (; counter < msgc; counter++) {
|
|
if (msgv[counter]->msg_style == PAM_PROMPT_ECHO_OFF) {
|
|
(*rspv)[counter].resp = strdup(password);
|
|
if ((*rspv)[counter].resp == NULL) {
|
|
rc = PAM_CONV_ERR;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (rc != PAM_SUCCESS) {
|
|
for (; counter >= 0; counter--) {
|
|
if (msgv[counter]->msg_style == PAM_PROMPT_ECHO_OFF)
|
|
free((*rspv)[counter].resp);
|
|
}
|
|
free(*rspv);
|
|
*rspv = NULL;
|
|
}
|
|
|
|
return rc;
|
|
}
|
|
|
|
int
|
|
od_pam_auth(char *od_pam_service, kiwi_var_t *user, kiwi_password_t *password)
|
|
{
|
|
struct pam_conv conv = {
|
|
od_pam_conversation,
|
|
.appdata_ptr = (void *)password->password,
|
|
};
|
|
|
|
pam_handle_t *pamh = NULL;
|
|
int rc;
|
|
rc = pam_start(od_pam_service, user->value, &conv, &pamh);
|
|
if (rc != PAM_SUCCESS)
|
|
goto error;
|
|
|
|
rc = pam_authenticate(pamh, 0);
|
|
if (rc != PAM_SUCCESS)
|
|
goto error;
|
|
|
|
rc = pam_acct_mgmt(pamh, PAM_SILENT);
|
|
if (rc != PAM_SUCCESS)
|
|
goto error;
|
|
|
|
rc = pam_end(pamh, rc);
|
|
if (rc != PAM_SUCCESS)
|
|
return -1;
|
|
|
|
return 0;
|
|
|
|
error:
|
|
pam_end(pamh, rc);
|
|
return -1;
|
|
}
|