tst-pam_unix4.c 4.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154
  1. /*
  2. * Redistribution and use in source and binary forms, with or without
  3. * modification, are permitted provided that the following conditions
  4. * are met:
  5. * 1. Redistributions of source code must retain the above copyright
  6. * notice, and the entire permission notice in its entirety,
  7. * including the disclaimer of warranties.
  8. * 2. Redistributions in binary form must reproduce the above copyright
  9. * notice, this list of conditions and the following disclaimer in the
  10. * documentation and/or other materials provided with the distribution.
  11. * 3. The name of the author may not be used to endorse or promote
  12. * products derived from this software without specific prior
  13. * written permission.
  14. *
  15. * ALTERNATIVELY, this product may be distributed under the terms of
  16. * the GNU Public License, in which case the provisions of the GPL are
  17. * required INSTEAD OF the above restrictions. (This clause is
  18. * necessary due to a potential bad interaction between the GPL and
  19. * the restrictions contained in a BSD-style copyright.)
  20. *
  21. * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
  22. * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
  23. * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
  24. * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
  25. * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
  26. * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
  27. * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  28. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  29. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  30. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  31. * OF THE POSSIBILITY OF SUCH DAMAGE.
  32. */
  33. /*
  34. * Check password change minimum days handling.
  35. */
  36. #ifdef HAVE_CONFIG_H
  37. #include <config.h>
  38. #endif
  39. #include <stdio.h>
  40. #include <stdlib.h>
  41. #include <string.h>
  42. #include <security/pam_appl.h>
  43. #include <sys/types.h>
  44. #include <pwd.h>
  45. #include <unistd.h>
  46. /* A conversation function which uses an internally-stored value for
  47. the responses. */
  48. static int
  49. fake_conv (int num_msg, const struct pam_message **msgm UNUSED,
  50. struct pam_response **response, void *appdata_ptr UNUSED)
  51. {
  52. struct pam_response *reply;
  53. int count;
  54. static int respnum = 0;
  55. static const char *resps[] = { "pamunix01", "TsTPAM01MAP", "TsTPAM01MAP" };
  56. /* Sanity test. */
  57. if (num_msg <= 0)
  58. return PAM_CONV_ERR;
  59. /* Allocate memory for the responses. */
  60. reply = calloc (num_msg, sizeof (struct pam_response));
  61. if (reply == NULL)
  62. return PAM_CONV_ERR;
  63. /* Answer with appropriate response from the above array. */
  64. for (count = 0; count < num_msg; ++count)
  65. {
  66. if (msgm[count]->msg_style == PAM_PROMPT_ECHO_OFF)
  67. {
  68. reply[count].resp_retcode = 0;
  69. reply[count].resp = strdup (resps[respnum % 3]);
  70. ++respnum;
  71. }
  72. }
  73. /* Set the pointers in the response structure and return. */
  74. *response = reply;
  75. return PAM_SUCCESS;
  76. }
  77. static struct pam_conv conv = {
  78. fake_conv,
  79. NULL
  80. };
  81. /* Check that errors of optional modules are ignored and that
  82. required modules after a sufficient one are not executed. */
  83. int
  84. main(int argc, char *argv[])
  85. {
  86. pam_handle_t *pamh=NULL;
  87. const char *user="tstpamunix";
  88. int retval;
  89. int debug = 0;
  90. int fail;
  91. struct passwd *pwd;
  92. if (argc < 2 || (*argv[1] != 'f' &&
  93. *argv[1] != 'p'))
  94. {
  95. fprintf (stderr, "Need fail or pass argument.\n");
  96. return 2;
  97. }
  98. fail = *argv[1] == 'f';
  99. if (argc > 2 && strcmp (argv[2], "-d") == 0)
  100. debug = 1;
  101. pwd = getpwnam (user);
  102. if (pwd == NULL)
  103. {
  104. if (debug)
  105. fprintf (stderr, "unix4: Missing tstpamunix user.\n");
  106. return 2;
  107. }
  108. /* we must switch the real (not effective) user so the restrictions
  109. are enforced */
  110. setreuid (pwd->pw_uid, -1);
  111. retval = pam_start("tst-pam_unix4", user, &conv, &pamh);
  112. if (retval != PAM_SUCCESS)
  113. {
  114. if (debug)
  115. fprintf (stderr, "unix4: pam_start returned %d\n", retval);
  116. return 1;
  117. }
  118. retval = pam_chauthtok (pamh, 0);
  119. if ((!fail && retval != PAM_SUCCESS) || (fail && retval == PAM_SUCCESS))
  120. {
  121. if (debug)
  122. fprintf (stderr, "unix4-1: pam_chauthtok returned %d\n", retval);
  123. return 1;
  124. }
  125. retval = pam_end (pamh,retval);
  126. if (retval != PAM_SUCCESS)
  127. {
  128. if (debug)
  129. fprintf (stderr, "unix4: pam_end returned %d\n", retval);
  130. return 1;
  131. }
  132. return 0;
  133. }