1 /*-
2  * Copyright (c) 2001,2003 Networks Associates Technology, Inc.
3  * All rights reserved.
4  *
5  * This software was developed for the FreeBSD Project by ThinkSec AS and
6  * NAI Labs, the Security Research Division of Network Associates, Inc.
7  * under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the
8  * DARPA CHATS research program.
9  *
10  * Redistribution and use in source and binary forms, with or without
11  * modification, are permitted provided that the following conditions
12  * are met:
13  * 1. Redistributions of source code must retain the above copyright
14  *    notice, this list of conditions and the following disclaimer.
15  * 2. Redistributions in binary form must reproduce the above copyright
16  *    notice, this list of conditions and the following disclaimer in the
17  *    documentation and/or other materials provided with the distribution.
18  * 3. The name of the author may not be used to endorse or promote
19  *    products derived from this software without specific prior written
20  *    permission.
21  *
22  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
23  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
26  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32  * SUCH DAMAGE.
33  *
34  * $FreeBSD: src/lib/libpam/modules/pam_echo/pam_echo.c,v 1.4 2003/12/11 13:55:15 des Exp $
35  */
36 
37 #include <stdio.h>
38 #include <stdlib.h>
39 #include <string.h>
40 
41 #include <security/pam_appl.h>
42 #include <security/pam_modules.h>
43 #include <security/openpam.h>
44 
45 static int
46 _pam_echo(pam_handle_t *pamh, int flags, int argc, const char *argv[])
47 {
48 	char msg[PAM_MAX_MSG_SIZE];
49 	const void *str;
50 	const char *p, *q;
51 	int err, i, item;
52 	size_t len;
53 
54 	if (flags & PAM_SILENT)
55 		return (PAM_SUCCESS);
56 	for (i = 0, len = 0; i < argc && len < sizeof(msg) - 1; ++i) {
57 		if (i > 0)
58 			msg[len++] = ' ';
59 		for (p = argv[i]; *p != '\0' && len < sizeof(msg) - 1; ++p) {
60 			if (*p != '%' || p[1] == '\0') {
61 				msg[len++] = *p;
62 				continue;
63 			}
64 			switch (*++p) {
65 			case 'H':
66 				item = PAM_RHOST;
67 				break;
68 			case 'h':
69 				/* not implemented */
70 				item = -1;
71 				break;
72 			case 's':
73 				item = PAM_SERVICE;
74 				break;
75 			case 't':
76 				item = PAM_TTY;
77 				break;
78 			case 'U':
79 				item = PAM_RUSER;
80 				break;
81 			case 'u':
82 				item = PAM_USER;
83 				break;
84 			default:
85 				item = -1;
86 				msg[len++] = *p;
87 				break;
88 			}
89 			if (item == -1)
90 				continue;
91 			err = pam_get_item(pamh, item, &str);
92 			if (err != PAM_SUCCESS)
93 				return (err);
94 			if (str == NULL)
95 				str = "(null)";
96 			for (q = str; *q != '\0' && len < sizeof(msg) - 1; ++q)
97 				msg[len++] = *q;
98 		}
99 	}
100 	msg[len] = '\0';
101 	return (pam_info(pamh, "%s", msg));
102 }
103 
104 PAM_EXTERN int
105 pam_sm_authenticate(pam_handle_t *pamh, int flags, int argc, const char *argv[])
106 {
107 
108 	return (_pam_echo(pamh, flags, argc, argv));
109 }
110 
111 PAM_EXTERN int
112 pam_sm_setcred(pam_handle_t *pamh __unused, int flags __unused,
113 	       int argc __unused, const char *argv[] __unused)
114 {
115 
116 	return (PAM_SUCCESS);
117 }
118 
119 PAM_EXTERN int
120 pam_sm_acct_mgmt(pam_handle_t *pamh, int flags, int argc, const char *argv[])
121 {
122 
123 	return (_pam_echo(pamh, flags, argc, argv));
124 }
125 
126 PAM_EXTERN int
127 pam_sm_open_session(pam_handle_t *pamh, int flags, int argc, const char *argv[])
128 {
129 
130 	return (_pam_echo(pamh, flags, argc, argv));
131 }
132 
133 PAM_EXTERN int
134 pam_sm_close_session(pam_handle_t *pamh, int flags,
135 		     int argc, const char *argv[])
136 {
137 
138 	return (_pam_echo(pamh, flags, argc, argv));
139 }
140 
141 PAM_EXTERN int
142 pam_sm_chauthtok(pam_handle_t *pamh, int flags, int argc, const char *argv[])
143 {
144 
145 	if (flags & PAM_PRELIM_CHECK)
146 		return (PAM_SUCCESS);
147 	return (_pam_echo(pamh, flags, argc, argv));
148 }
149 
150 PAM_MODULE_ENTRY("pam_echo");
151