mirror of
https://github.com/MariaDB/server.git
synced 2025-12-01 17:39:21 +03:00
efba0b1df5
New version of PAM plugin (v2.0) added along with the old v1.0. There the pam module is isolated in the auth_pam_tool application so cannot crash the server.
90 lines
2.2 KiB
C
90 lines
2.2 KiB
C
/*
|
|
This code is in the public domain and has no copyright.
|
|
|
|
Pam module to test pam authentication plugin. Used in pam.test.
|
|
Linux only.
|
|
|
|
Compile as
|
|
|
|
gcc pam_mariadb_mtr.c -shared -lpam -fPIC -o pam_mariadb_mtr.so
|
|
|
|
Install as appropriate (for example, in /lib/security/).
|
|
Create /etc/pam.d/mariadb_mtr with
|
|
=========================================================
|
|
auth required pam_mariadb_mtr.so pam_test
|
|
account required pam_permit.so
|
|
=========================================================
|
|
*/
|
|
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <security/pam_modules.h>
|
|
#include <security/pam_appl.h>
|
|
|
|
#define N 3
|
|
|
|
int pam_sm_authenticate(pam_handle_t *pamh, int flags,
|
|
int argc, const char *argv[])
|
|
{
|
|
struct pam_conv *conv;
|
|
struct pam_response *resp = 0;
|
|
int pam_err, retval = PAM_SYSTEM_ERR;
|
|
struct pam_message msg[N] = {
|
|
{ PAM_TEXT_INFO, "Challenge input first." },
|
|
{ PAM_PROMPT_ECHO_ON, "Enter:" },
|
|
{ PAM_ERROR_MSG, "Now, the magic number!" }
|
|
};
|
|
const struct pam_message *msgp[N] = { msg, msg+1, msg+2 };
|
|
char *r1 = 0, *r2 = 0;
|
|
|
|
pam_err = pam_get_item(pamh, PAM_CONV, (const void **)&conv);
|
|
if (pam_err != PAM_SUCCESS)
|
|
goto ret;
|
|
|
|
pam_err = (*conv->conv)(N, msgp, &resp, conv->appdata_ptr);
|
|
|
|
if (pam_err != PAM_SUCCESS || !resp || !((r1= resp[1].resp)))
|
|
goto ret;
|
|
|
|
free(resp);
|
|
|
|
msg[0].msg_style = PAM_PROMPT_ECHO_OFF;
|
|
msg[0].msg = "PIN:";
|
|
pam_err = (*conv->conv)(1, msgp, &resp, conv->appdata_ptr);
|
|
|
|
if (pam_err != PAM_SUCCESS || !resp || !((r2= resp[0].resp)))
|
|
goto ret;
|
|
|
|
if (strlen(r1) == atoi(r2) % 100)
|
|
retval = PAM_SUCCESS;
|
|
else
|
|
{
|
|
/* Produce the crash for testing purposes. */
|
|
if ((strlen(r1) == 16) &&
|
|
memcmp(r1, "crash pam module", 16) == 0 &&
|
|
atoi(r2) == 666)
|
|
{
|
|
r1= 0;
|
|
*((struct pam_message *) r1)= msg[0];
|
|
}
|
|
retval = PAM_AUTH_ERR;
|
|
}
|
|
|
|
if (argc > 0 && argv[0])
|
|
pam_set_item(pamh, PAM_USER, argv[0]);
|
|
|
|
ret:
|
|
free(resp);
|
|
free(r1);
|
|
free(r2);
|
|
return retval;
|
|
}
|
|
|
|
int pam_sm_setcred(pam_handle_t *pamh, int flags,
|
|
int argc, const char *argv[])
|
|
{
|
|
|
|
return PAM_SUCCESS;
|
|
}
|
|
|