chpw_trans.c

来自「<B>Digital的Unix操作系统VAX 4.2源码</B>」· C语言 代码 · 共 278 行

#ifndef lint
static char *sccsid = "@(#)chpw_trans.c	4.1      ULTRIX  7/2/90";
#endif lint

/************************************************************************
 *                                                                      *
 *                      Copyright (c) 1989 by                           *
 *              Digital Equipment Corporation, Maynard, MA              *
 *                      All rights reserved.                            *
 *                                                                      *
 *   This software is furnished under a license and may be used and     *
 *   copied  only  in accordance with the terms of such license and     *
 *   with the  inclusion  of  the  above  copyright  notice.   This     *
 *   software  or  any  other copies thereof may not be provided or     *
 *   otherwise made available to any other person.  No title to and     *
 *   ownership of the software is hereby transferred.                   *
 *                                                                      *
 *   The information in this software is subject to change  without     *
 *   notice  and should not be construed as a commitment by Digital     *
 *   Equipment Corporation.                                             *
 *                                                                      *
 *   Digital assumes no responsibility for the use  or  reliability     *
 *   of its software on equipment which is not supplied by Digital.     *
 *                                                                      *
 ************************************************************************/

/************************************************************************
 *                                                                      *
 *	chpw_trans - Accepts as arguments the following:		*
 *                                                                      *
 *	uid_t	ouid;	uid of user requesting a password change 	*
 *	char	*opwd;	Old passowrd of user(uid)			*
 *	char	*ncrypt;New encrypted password of user(uid)		*
 *                                                                      *
 *	retval=0 => An error occured    				*
 *	       1 => All is well						*
 *                                                                      *
 *	Chpw_trans checks the received password to assure its validity  *
 *	with respect to the associated uid. If all is well the new	*
 *	encrypted password string will replace the old encrypted        *
 *	password string in the homebase/passwd file. Hesiod make_passwd *
 *	is then called to update the hesiod.db. Once a new hesiod.db is *
 *	created the local "MASTER" named is restarted which starts the  *
 * 	distribution of the new password database.			*
 *									*
 ************************************************************************/
     

#include <sys/param.h>
#include <sys/types.h>
#include <sys/fs.h>
#include <sys/file.h>
#include <sys/ioctl.h>
#include <sys/time.h>
#include <sys/stat.h>
#include <errno.h>
#include <syslog.h>
#include <signal.h>
#include <stdio.h>
#include <pwd.h>
#include <ctype.h>
#include <auth.h>


extern FILE *heslog; 	/* hesupd log file opened by now 		*/
extern char *homebase; 	/* hesupd home directory chdired by now 	*/

char *index();

int
chpw_trans(ouid, opwd, ncrypt)
uid_t	ouid;		/* uid of user requesting a password change 	*/
char	*opwd;		/* Old passowrd of user(uid)			*/
char	*ncrypt;	/* New encrypted password of user(uid)		*/
{	
        FILE *afp=NULL, *oafp, *pfp=NULL, *opfp;
	long now, time();
        int pfd, afd, i, len, upgrade=0;
	int retval=0;
        void (*f1)(), (*f2)(), (*f3)();
        char buf[2048], *p, *pwptr;
	CRYPT_PASSWORD newpass, crypt_pass;
	char (*fp)();
        char cmdbuf[BUFSIZ];
	struct passwd *pwent, *getpwuid_bind();
	AUTHORIZATION *authent, *getauthuid_hesiod();

	pwent = getpwuid_bind(ouid);
	if(pwent == NULL)  {
		fprintf(heslog,"No password entry for uid %d\n",ouid);
		return(retval);
	}
	authent = getauthuid_hesiod(ouid);
	if(authent == NULL) {
		fprintf(heslog, "No auth entry for uid %d\n", ouid);
		return retval;
	}
	if(!strcmp(pwent->pw_passwd, "*")) {
		pwptr = authent->a_password;
		if(strcmp(crypt16(opwd, pwptr), pwptr) != 0) {
			fprintf(heslog,"Bad password attempted for uid %d\n",ouid);
			return(retval);
			}
	} else {
		pwptr = pwent->pw_passwd;
		if(strcmp(crypt(opwd, pwptr), pwptr) != 0) {
			fprintf(heslog,"Bad password attempted for uid %d\n",ouid);
			return(retval);
			}
		upgrade = 1;
		}
	if(!(authent->a_authmask & A_CHANGE_PASSWORD)) {
		fprintf(heslog, "Password for uid %n not user settable\n", ouid);
		return(retval);
	}
	now = time(0);
	if(now < authent->a_pass_mod+authent->a_pw_minexp) {
		fprintf(heslog, "Minimum password modification time has not expired for uid %d\n", ouid);
		return retval;
	}
/***								 ***/
/*** We now assume that the ouid is valid and set the new passwd ***/
/***								 ***/
	        (void) umask(0);

        f1 = signal(SIGHUP, SIG_IGN);
        f2 = signal(SIGINT, SIG_IGN);
        f3 = signal(SIGQUIT, SIG_IGN);
/*
 * Lock the auth data base.
 */
        afd = open("hesupd_auth", O_WRONLY|O_CREAT|O_EXCL, 0600);
        if (afd < 0) {
		fputs("auth file busy - try again.\n", stderr);
                goto cleanup;
	}
	afp = fdopen(afd, "w");
	if(afp == NULL) {
		fputs("hesupd: fdopen failed?\n", heslog);
		goto cleanup;
	}
	if ((oafp = fopen("auth", "r")) == NULL) {
		fputs("hesupd: Unable to open auth file?\n", stderr);
		goto cleanup;
	}
/*
 * Lock the passwd data base if we need to.
 */
	if(upgrade) {
		pfd = open("hesupd_passwd", O_WRONLY|O_CREAT|O_EXCL, 0644);
		if(pfd < 0) {
			fputs("passwd file busy - try again.\n", stderr);
			goto cleanup;
		}
		pfp = fdopen(pfd, "w");
		if(pfp == NULL) {
			fputs("hesupd: fdopen falied?\n", heslog);
			goto cleanup;
		}
		if((opfp = fopen("passwd", "r")) == NULL) {
			fputs("hesupd: Unable to open passwd file?\n", stderr);
			goto cleanup;
		}
	}
        signal(SIGTSTP, SIG_IGN);
/*
 * Make a local copy of the new password checking to make sure it's
 * not garbage.
 */
	len = strlen(ncrypt);
	if(len >= sizeof newpass) {
		fputs("hesupd: New password for uid %d too long\n", ouid);
		goto cleanup;
	}
	pwptr = newpass;
	p = ncrypt;
	for(p=ncrypt; (*p != '\0'); p++) {
                if ((*p == ':') || !(isprint(*p)))
                        *pwptr++ = '$';       /* you lose buckwheat */
		else
			*pwptr++ = *p;
	}
	*pwptr = '\0';
	bcopy(newpass,authent->a_password, CRYPT_PASSWORD_LENGTH);
	authent->a_pass_mod = now;
/*
 * Copy and modify the auth file
 */
	while (fgets(buf, sizeof(buf), oafp)) {
		p = index(buf, ':');
		if (p && atoi(buf) == authent->a_uid) {
			fputs(asciiauth(authent), afp);
			putc('\n', afp);
		} else
			fputs(buf, afp);
	}
	fclose(oafp);
	fclose(afp);
	afp = NULL;
/*
 * Copy and modify the password file if we need to upgrade this entry.
 */
	len = strlen(pwent->pw_name);
	if(upgrade) {
		while (fgets(buf, sizeof(buf), opfp)) {
			p = index(buf, ':');
                if (p && p - buf == len
                    && strncmp(pwent->pw_name, buf, p - buf) == 0) 
				fprintf(pfp, "%s:*:%d:%d:%s:%s:%s\n",
				    pwent->pw_name,
				    pwent->pw_uid,
				    pwent->pw_gid,
				    pwent->pw_gecos,
				    pwent->pw_dir,
				    pwent->pw_shell);
			else
				fputs(buf, pfp);
		}
		fclose(opfp);
		fclose(pfp);
		pfp = NULL;
	}
/*
 * Copy in new auth file
 */
	(void) umask(077);
	strcpy(cmdbuf,"cp ");
	strcat(cmdbuf,"hesupd_auth");
	strcat(cmdbuf," ");
	strcat(cmdbuf,"auth");
	system(cmdbuf);
	unlink("hesupd_auth");
	(void) umask(022);
/*
 * Copy in new passwd file if necessary
 */
	if(upgrade) {
		strcpy(cmdbuf,"cp ");
		strcat(cmdbuf,"hesupd_passwd");
		strcat(cmdbuf," ");
		strcat(cmdbuf,"passwd");
		system(cmdbuf);
		unlink("hesupd_passwd");
	}
/*
 * Create the new passwd.db 
 */
	strcpy(cmdbuf, "/var/dss/namedb/bin/make_passwd ");
	strcat(cmdbuf, homebase);
	strcat(cmdbuf, "/passwd ");
	strcat(cmdbuf, "/var/dss/namedb/passwd.db");
	system(cmdbuf);
/*
 * Create the new auth.db 
 */
	strcpy(cmdbuf, "/var/dss/namedb/bin/make_auth ");
	strcat(cmdbuf, homebase);
	strcat(cmdbuf, "/auth ");
	strcat(cmdbuf, "/var/dss/namedb/auth.db");
	system(cmdbuf);
/*
 * Distrbute the new hesiod.db
 */
	strcpy(cmdbuf,"/var/dss/namedb/bin/restart_named");
	system(cmdbuf);
	sleep(10);
	retval=1;
cleanup:
	if(pfp)
		fclose(pfp);
	if(afp)
		fclose(afp);
        signal(SIGHUP, f1);
        signal(SIGINT, f2);
        signal(SIGQUIT, f3);
	return(retval);
}