1 /* User authentication for vtysh.
2 * Copyright (C) 2000 Kunihiro Ishiguro
4 * This file is part of GNU Zebra.
6 * GNU Zebra is free software; you can redistribute it and/or modify it
7 * under the terms of the GNU General Public License as published by the
8 * Free Software Foundation; either version 2, or (at your option) any
11 * GNU Zebra is distributed in the hope that it will be useful, but
12 * WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * General Public License for more details.
16 * You should have received a copy of the GNU General Public License along
17 * with this program; see the file COPYING; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
22 #include <lib/version.h>
27 #include <security/pam_appl.h>
28 #ifdef HAVE_PAM_MISC_H
29 #include <security/pam_misc.h>
32 #include <security/openpam.h>
39 #include "vtysh/vtysh_user.h"
42 * Compiler is warning about prototypes not being declared.
43 * The DEFUNSH and DEFUN macro's are messing with the
44 * compiler I believe. This is just to make it happy.
47 static int vtysh_pam(const char *);
50 void vtysh_user_init(void);
52 extern struct list
*config_top
;
53 extern void config_add_line(struct list
*config
, const char *line
);
56 static struct pam_conv conv
= {PAM_CONV_FUNC
, NULL
};
58 static int vtysh_pam(const char *user
)
61 pam_handle_t
*pamh
= NULL
;
64 ret
= pam_start(FRR_PAM_NAME
, user
, &conv
, &pamh
);
66 /* Is user really user? */
67 if (ret
== PAM_SUCCESS
)
68 ret
= pam_authenticate(pamh
, 0);
70 if (ret
!= PAM_SUCCESS
)
71 fprintf(stderr
, "vtysh_pam: Failure to initialize pam: %s(%d)",
72 pam_strerror(pamh
, ret
), ret
);
75 if (pam_end(pamh
, ret
) != PAM_SUCCESS
) {
77 fprintf(stderr
, "vtysh_pam: failed to release authenticator: %s(%d)\n",
78 pam_strerror(pamh
, ret
), ret
);
82 return ret
== PAM_SUCCESS
? 0 : 1;
91 struct list
*userlist
;
93 static struct vtysh_user
*user_new(void)
95 return XCALLOC(MTYPE_TMP
, sizeof(struct vtysh_user
));
98 static struct vtysh_user
*user_lookup(const char *name
)
100 struct listnode
*node
, *nnode
;
101 struct vtysh_user
*user
;
103 for (ALL_LIST_ELEMENTS(userlist
, node
, nnode
, user
)) {
104 if (strcmp(user
->name
, name
) == 0)
110 void user_config_write(void)
112 struct listnode
*node
, *nnode
;
113 struct vtysh_user
*user
;
116 for (ALL_LIST_ELEMENTS(userlist
, node
, nnode
, user
)) {
117 if (user
->nopassword
) {
118 snprintf(line
, sizeof(line
), "username %s nopassword",
120 config_add_line(config_top
, line
);
125 static struct vtysh_user
*user_get(const char *name
)
127 struct vtysh_user
*user
;
128 user
= user_lookup(name
);
133 user
->name
= strdup(name
);
134 listnode_add(userlist
, user
);
139 DEFUN (vtysh_banner_motd_file
,
140 vtysh_banner_motd_file_cmd
,
141 "banner motd file FILE",
144 "Banner from a file\n"
148 return cmd_banner_motd_file(argv
[idx_file
]->arg
);
151 DEFUN (vtysh_banner_motd_line
,
152 vtysh_banner_motd_line_cmd
,
153 "banner motd line LINE...",
156 "Banner from an input\n"
162 argv_find(argv
, argc
, "LINE", &idx
);
163 motd
= argv_concat(argv
, argc
, idx
);
165 cmd_banner_motd_line(motd
);
166 XFREE(MTYPE_TMP
, motd
);
171 DEFUN (username_nopassword
,
172 username_nopassword_cmd
,
173 "username WORD nopassword",
179 struct vtysh_user
*user
;
180 user
= user_get(argv
[idx_word
]->arg
);
181 user
->nopassword
= 1;
187 struct vtysh_user
*user
;
188 struct passwd
*passwd
;
190 if ((passwd
= getpwuid(geteuid())) == NULL
) {
191 fprintf(stderr
, "could not lookup user ID %d\n",
196 user
= user_lookup(passwd
->pw_name
);
197 if (user
&& user
->nopassword
)
201 if (vtysh_pam(passwd
->pw_name
))
208 char *vtysh_get_home(void)
210 struct passwd
*passwd
;
213 if ((homedir
= getenv("HOME")) != NULL
)
216 /* Fallback if HOME is undefined */
217 passwd
= getpwuid(getuid());
219 return passwd
? passwd
->pw_dir
: NULL
;
222 void vtysh_user_init(void)
224 userlist
= list_new();
225 install_element(CONFIG_NODE
, &username_nopassword_cmd
);
226 install_element(CONFIG_NODE
, &vtysh_banner_motd_file_cmd
);
227 install_element(CONFIG_NODE
, &vtysh_banner_motd_line_cmd
);