Branch data     Line data    Source code

       1                 :            : /* $OpenBSD: auth2-passwd.c,v 1.11 2014/02/02 03:44:31 djm Exp $ */
       2                 :            : /*
       3                 :            :  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
       4                 :            :  *
       5                 :            :  * Redistribution and use in source and binary forms, with or without
       6                 :            :  * modification, are permitted provided that the following conditions
       7                 :            :  * are met:
       8                 :            :  * 1. Redistributions of source code must retain the above copyright
       9                 :            :  *    notice, this list of conditions and the following disclaimer.
      10                 :            :  * 2. Redistributions in binary form must reproduce the above copyright
      11                 :            :  *    notice, this list of conditions and the following disclaimer in the
      12                 :            :  *    documentation and/or other materials provided with the distribution.
      13                 :            :  *
      14                 :            :  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
      15                 :            :  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
      16                 :            :  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
      17                 :            :  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
      18                 :            :  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
      19                 :            :  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
      20                 :            :  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
      21                 :            :  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
      22                 :            :  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
      23                 :            :  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
      24                 :            :  */
      25                 :            : 
      26                 :            : #include "includes.h"
      27                 :            : 
      28                 :            : #include <sys/types.h>
      29                 :            : 
      30                 :            : #include <string.h>
      31                 :            : #include <stdarg.h>
      32                 :            : 
      33                 :            : #include "xmalloc.h"
      34                 :            : #include "packet.h"
      35                 :            : #include "log.h"
      36                 :            : #include "key.h"
      37                 :            : #include "hostfile.h"
      38                 :            : #include "auth.h"
      39                 :            : #include "buffer.h"
      40                 :            : #ifdef GSSAPI
      41                 :            : #include "ssh-gss.h"
      42                 :            : #endif
      43                 :            : #include "monitor_wrap.h"
      44                 :            : #include "servconf.h"
      45                 :            : 
      46                 :            : /* import */
      47                 :            : extern ServerOptions options;
      48                 :            : 
      49                 :            : static int
      50                 :          0 : userauth_passwd(Authctxt *authctxt)
      51                 :            : {
      52                 :            :         char *password, *newpass;
      53                 :          0 :         int authenticated = 0;
      54                 :            :         int change;
      55                 :            :         u_int len, newlen;
      56                 :            : 
      57                 :          0 :         change = packet_get_char();
      58                 :          0 :         password = packet_get_string(&len);
      59         [ #  # ]:          0 :         if (change) {
      60                 :            :                 /* discard new password from packet */
      61                 :          0 :                 newpass = packet_get_string(&newlen);
      62                 :          0 :                 explicit_bzero(newpass, newlen);
      63                 :          0 :                 free(newpass);
      64                 :            :         }
      65         [ #  # ]:          0 :         packet_check_eom();
      66                 :            : 
      67         [ #  # ]:          0 :         if (change)
      68                 :          0 :                 logit("password change not supported");
      69 [ #  # ][ #  # ]:          0 :         else if (PRIVSEP(auth_password(authctxt, password)) == 1)
      70                 :          0 :                 authenticated = 1;
      71                 :          0 :         explicit_bzero(password, len);
      72                 :          0 :         free(password);
      73                 :          0 :         return authenticated;
      74                 :            : }
      75                 :            : 
      76                 :            : Authmethod method_passwd = {
      77                 :            :         "password",
      78                 :            :         userauth_passwd,
      79                 :            :         &options.password_authentication
      80                 :            : };